Florent B wrote: > Hi Jan, > > make test is giving me : > > ALL TESTS SUCCESSFUL. > > > And openssl speed -engine padlock -evp bf-cbc : > > > engine "padlock" set. > Doing bf-cbc for 3s on 16 size blocks: 7954726 bf-cbc's in 3.00s > Doing bf-cbc for 3s on 64 size blocks: 2356547 bf-cbc's in 3.00s > Doing bf-cbc for 3s on 256 size blocks: 618260 bf-cbc's in 3.00s > Doing bf-cbc for 3s on 1024 size blocks: 156226 bf-cbc's in 3.00s > Doing bf-cbc for 3s on 8192 size blocks: 19609 bf-cbc's in 3.00s > OpenSSL 1.0.1g 7 Apr 2014 > built on: Tue May 6 13:10:03 CEST 2014 > options:bn(64,64) rc4(8x,int) des(idx,cisc,16,int) aes(partial) > idea(int) blowfish(idx) > compiler: gcc -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H > -Wa,--noexecstack -m64 -DL_ENDIAN -DTERMIO -O3 -Wall -DOPENSSL_IA32_SSE2 > -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m > -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM > -DBSAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM > The 'numbers' are in 1000s of bytes per second processed. > type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 > bytes > bf-cbc 42425.21k 50273.00k 52758.19k 53325.14k > 53545.64k > > > ok , so it seems that the padlock engine is working - are the 'openssl speed' results much different without the '-engine ...' ? does it then NOT use the padlock engine? (just checking...)
if so, then we need to look into how openvpn is accessing the encryption routines - AFAIUC they're plain openssl calls, so if the openssl engine works then openvpn should also work ... HTH, JJK > On 05/06/2014 06:30 PM, Jan Just Keijser wrote: > >> Hi Florent, >> >> Florent B wrote: >> >>> Hi all, >>> >>> I am running a Debian Wheezy over a VIA Nano processor U2250 processor. >>> >>> This processor does not support AES Intel instructions, but supports VIA >>> Padlock which can do AES. >>> >>> Kernel modules are loaded : >>> >>> root@sd-39714:~# lsmod | grep padlock >>> padlock_sha 13367 0 >>> padlock_aes 13024 0 >>> aes_generic 33026 1 padlock_aes >>> >>> >>> >> the kernel modules have nothing to do with openssl itself; did you run >> make test >> after compiling openssl 1.0.1g ? what happens if you run something like >> openssl speed -engine padlock -evp bf-cbc >> ? >> >> >> cheers, >> >> JJK >> >> > > ------------------------------------------------------------------------------ Is your legacy SCM system holding you back? Join Perforce May 7 to find out: • 3 signs your SCM is hindering your productivity • Requirements for releasing software faster • Expert tips and advice for migrating your SCM now http://p.sf.net/sfu/perforce _______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
