Collected performance numbers using "openssl speed" for two copies of OpenSSL 1.0.1e, one built as FIPS-capable, the other not, running on an ARMv6. I am having a hard time understanding the differences I observed and would appreciate any insight.
Non-FIPS Capable # openssl speed aes Type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-128 cbc 2345.03k 2627.50k 2708.99k 2739.11k 2730.67k aes-192 cbc 2029.69k 2236.10k 2293.85k 2316.84k 2310.14k aes-256 cbc 1782.30k 1943.21k 1988.52k 2000.21k 1994.93k #openssl speed -evp aes-128-cbc aes-128-cbc 2234.73k 2591.72k 2698.50k 2726.91k 2733.40k #openssl speed -evp aes-192-cbc aes-192-cbc 1941.83k 2206.61k 2284.12k 2304.68k 2310.14k #openssl speed -evp aes-256-cbc aes-256-cbc 1719.65k 1923.88k 1982.21k 1997.82k 2001.58k FIPS Capable # openssl speed aes Type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-128 cbc 2540.86k 2846.65k 2923.78k 2946.73k 2951.85k aes-192 cbc 2193.64k 2416.26k 2478.85k 2503.15k 2501.29k aes-256 cbc 1933.31k 2103.79k 2150.57k 2163.37k 2160.95k #openssl speed -evp aes-128-cbc aes-128-cbc 4370.26k 6091.88k 6787.25k 6981.69k 7009.62k #openssl speed -evp aes-192-cbc aes-192-cbc 3992.79k 5353.26k 5865.22k 6010.54k 6048.43k #openssl speed -evp aes-256-cbc aes-256-cbc 3650.15k 4773.53k 5176.66k 5307.68k 5339.87k I don't understand why non-EVP and EVP results are practically the same with the non- FIPS capable library, but the EVP results are significantly faster than the non-EVP results on the FIPS-capable one. MV ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
