Re: New pkg audit / vuln.xml failures (php55, unzoo)

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi, On 5/23/15 09:14, Jason Unovitch wrote: > On Sat, May 23, 2015 at 11:30 AM, Roger Marquis > wrote: >> If you find a vulnerability such as a new CVE or mailing list >> announcement please send it to the port maintainer and >> as quickly as po

Atom C2758 - loading aesni(4) reduces performance

I’ve got an Atom C2758 system: CPU: Intel(R) Atom(TM) CPU C2758 @ 2.40GHz (2400.06-MHz K8-class CPU) Origin = "GenuineIntel" Id = 0x406d8 Family = 0x6 Model = 0x4d Stepping = 8 Features=0xbfebfbff Features2=0x43d8e3bf AMD Features=0x28100800 AMD Features2=0x101 Standard Exten

Re: New pkg audit / vuln.xml failures (php55, unzoo)

On Sun, May 24, 2015 at 12:53 AM, Xin Li wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > Hi, > > On 5/23/15 09:14, Jason Unovitch wrote: > > On Sat, May 23, 2015 at 11:30 AM, Roger Marquis > > wrote: > >> If you find a vulnerability such as a new CVE or mailing list > >> announcem

Re: Atom C2758 - loading aesni(4) reduces performance

Can you provide the output of freebsd-version, and openssl version? It looks like you're using a very old version of OpenSSL. Here's my output as an example: % freebsd-version 10.1-RELEASE-p10 % openssl version OpenSSL 1.0.1l-freebsd 15 Jan 2015 % /usr/local/bin/openssl version OpenSSL 1.0.2a 19

Re: Atom C2758 - loading aesni(4) reduces performance

root@router:/sys # freebsd-version 10.0-RELEASE-p7 root@router:/sys # openssl version OpenSSL 1.0.1e-freebsd 11 Feb 2013 That’s what ships with 10.0. Trying your version (1.0.2a) seems worse for both, but still slower with aesni than without. 1.0.1e without aesni: aes-256-cbc 176609.34k 24

Re: Atom C2758 - loading aesni(4) reduces performance

## Kevin Day (toa...@dragondata.com): > Is this expected here, or is something broken? I'd expect there's something wrong (I don't have access to an AES-NI capable Atom, but on my i7 there's no such impact). The performance numbers for the "openssl speed" suite show heavy fluctutation even under

Re: Atom C2758 - loading aesni(4) reduces performance

Kevin Day wrote this message on Sun, May 24, 2015 at 11:22 -0500: > I???ve got an Atom C2758 system: > > CPU: Intel(R) Atom(TM) CPU C2758 @ 2.40GHz (2400.06-MHz K8-class CPU) > Origin = "GenuineIntel" Id = 0x406d8 Family = 0x6 Model = 0x4d Stepping > = 8 > > Features=0xbfebfbff > >

10.1-p10?

Just ran freebsd-update and got updates for 10.1-p10, but see no advisories on the security lists or web site. The following files will be updated as part of updating to 10.1-RELEASE-p10: /bin/freebsd-version /boot/kernel/kernel /boot/kernel/kernel.symbols /boot/kernel/ufs.ko /boot/kernel/ufs.ko.s

Re: 10.1-p10?

On Mon, May 25, 2015 at 12:11:25AM -0400, Bryan Fullerton wrote: > Just ran freebsd-update and got updates for 10.1-p10, but see no advisories > on the security lists or web site. > > The following files will be updated as part of updating to 10.1-RELEASE-p10: > /bin/freebsd-version > /boot/kernel

Re: Atom C2758 - loading aesni(4) reduces performance

> On May 24, 2015, at 5:44 PM, John-Mark Gurney wrote: > > If you have cryptodev loaded, this is to be expected as OpenSSL will > use /dev/crypto instead of the AES-NI instructions.. Just don't load > cryptodev and you'll be fine.. > So to make sure I’m understanding… openssl has native AES-N

Re: 10.1-p10?

Ah, thanks, I see it now, and re-subbed to freebsd-announce. Bryan On Mon, May 25, 2015 at 12:15 AM, Glen Barber wrote: > On Mon, May 25, 2015 at 12:11:25AM -0400, Bryan Fullerton wrote: > > Just ran freebsd-update and got updates for 10.1-p10, but see no > advisories > > on the security list

Re: Atom C2758 - loading aesni(4) reduces performance

Kevin Day wrote this message on Sun, May 24, 2015 at 23:15 -0500: > > On May 24, 2015, at 5:44 PM, John-Mark Gurney wrote: > > > > If you have cryptodev loaded, this is to be expected as OpenSSL will > > use /dev/crypto instead of the AES-NI instructions.. Just don't load > > cryptodev and you'l