On Wed, Nov 13, 2013, Vuille, Martin (Martin) wrote: > Collected performance numbers using "openssl speed" for two copies of OpenSSL > 1.0.1e, > one built as FIPS-capable, the other not, running on an ARMv6. I am having a > hard time > understanding the differences I observed and would appreciate any insight. > [snip results] > > I don't understand why non-EVP and EVP results are practically the same with > the non- > FIPS capable library, but the EVP results are significantly faster than the > non-EVP results > on the FIPS-capable one. >
For the non-FIPS capable EVP calls the low level implementations for that version of OpenSSL. So, other than EVP overheads you get similar results. For the FIPS capable version EVP calls the FIPS module implementations of the algorithms while the low level calls still call the OpenSSL versions. So you're comparing two different implementations. So for some reason the implementations in OpenSSL aren't as fast as those in the FIPS module for your setup. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
