--- On Sun, 2/12/12, Ryan Brown <mp3g...@gmail.com> wrote:

> From: Ryan Brown <mp3g...@gmail.com>
> Subject: OpenSSL and AES-NI not there?
> To: openssl-users@openssl.org
> Date: Sunday, February 12, 2012, 7:39 PM
> Wanting to use AES-NI extension, but
> I'm not seeing it there.. Using
> Intel E3-1230 on a KVM VPS, Using OpenSSL 1.0.1-beta2,
> straight from a
> ./config ; make.
> 
> [root@fanboy:~]# /usr/local/openssl/bin/openssl engine
> (dynamic) Dynamic engine loading support
> (4758cca) IBM 4758 CCA hardware engine support
> (aep) Aep hardware engine support
> (atalla) Atalla hardware engine support
> (cswift) CryptoSwift hardware engine support
> (chil) CHIL hardware engine support
> (nuron) Nuron hardware engine support
> (sureware) SureWare hardware engine support
> (ubsec) UBSEC hardware engine support
> (padlock) VIA PadLock (no-RNG, no-ACE)
> (gost) Reference implementation of GOST engine
> 
> Not seeing the Intel stuff in the supported engine's, am I
> missing
> some config option?
> 
> [root@fanboy:~]# cat /proc/cpuinfo
> processor       : 0
> vendor_id       : GenuineIntel
> cpu family      : 6
> model           : 2
> model name      : QEMU Virtual CPU version
> 1.0
> stepping        : 3
> microcode       : 0x1
> cpu MHz         : 3192.748
> cache size      : 4096 KB
> fdiv_bug        : no
> hlt_bug         : no
> f00f_bug        : no
> coma_bug        : no
> fpu             :
> yes
> fpu_exception   : yes
> cpuid level     : 4
> wp              : yes
> flags           : fpu de
> pse tsc msr pae mce cx8 apic mtrr pge mca
> cmov pse36 clflush mmx fxsr sse sse2 syscall nx lm pni cx16
> popcnt
> hypervisor lahf_lm
> bogomips        : 6385.49
> clflush size    : 64
> cache_alignment : 64
> address sizes   : 40 bits physical, 48 bits
> virtual
> power management:
> 
> processor       : 1
> vendor_id       : GenuineIntel
> cpu family      : 6
> model           : 2
> model name      : QEMU Virtual CPU version
> 1.0
> stepping        : 3
> microcode       : 0x1
> cpu MHz         : 3192.748
> cache size      : 4096 KB
> fdiv_bug        : no
> hlt_bug         : no
> f00f_bug        : no
> coma_bug        : no
> fpu             :
> yes
> fpu_exception   : yes
> cpuid level     : 4
> wp              : yes
> flags           : fpu de
> pse tsc msr pae mce cx8 apic mtrr pge mca
> cmov pse36 clflush mmx fxsr sse sse2 syscall nx lm pni cx16
> popcnt
> hypervisor lahf_lm
> bogomips        : 6385.49
> clflush size    : 64
> cache_alignment : 64
> address sizes   : 40 bits physical, 48 bits
> virtual
> power management:
> ______________________________________________________________________
> OpenSSL Project           
>                
>      http://www.openssl.org
> User Support Mailing List         
>           openssl-users@openssl.org
> Automated List Manager         
>              
>    majord...@openssl.org
> 

Hello there

Got the exact problem a while ago too for myself

Looks like your VPS didn't pass the aes flag to your virtual processor, that's 
why AES-NI won't work

Maybe you could ask your VPS to enable this feature for you?

Once done, you could check with:

grep aes /proc/cpuinfo

if that returns anything, AES-NI should work for you

Hope that helps
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to