Re: [openssl-users] Re: having a lot of troubles trying to get AES-NI working

2013-11-06 Thread sarava.sars
Is it necessary to load aesni-intel module like modprobe aesni-intel ? Loading this module makes no difference in openssl speed output. openssl speed -elapsed -evp aes-128-cbc before loading aesni-intel module type 16 bytes 64 bytes256 bytes 1024 bytes 8192 bytes aes-128-

Re: [openssl-users] Re: having a lot of troubles trying to get AES-NI working

2013-03-16 Thread Ewen Chan
Is there a mailing list that I can ask Rijndael-specific questions? On Sat, Mar 16, 2013 at 3:25 AM, Ewen Chan wrote: > Interesting... > > Does this necessarily implicitly implies that the Rijndael cipher was > selected as the AES "winner" because it was also "simple" enough to be > fast, while m

Re: [openssl-users] Re: having a lot of troubles trying to get AES-NI working

2013-03-16 Thread Ewen Chan
Interesting... Does this necessarily implicitly implies that the Rijndael cipher was selected as the AES "winner" because it was also "simple" enough to be fast, while meeting the security and protection requirements when they initiated the open call for proposals? I didn't realize that the AES a

Re: [openssl-users] Re: having a lot of troubles trying to get AES-NI working

2013-03-15 Thread Matthew Hall
On Sat, Mar 16, 2013 at 01:16:23AM -0400, Ewen Chan wrote: > Okay then, here's another one of my infamous dumb questions. > > If that's the case, then why do we need the AES-NI instruction set? It's far from the first accelerated instruction set of dubious utility. ;) Marketing... etc. Actually

Re: [openssl-users] Re: having a lot of troubles trying to get AES-NI working

2013-03-15 Thread Ewen Chan
Okay then, here's another one of my infamous dumb questions. If that's the case, then why do we need the AES-NI instruction set? If it's likely going to be storage and/or network bandwidth limited; wouldn't the improvements made by introducing and incorporating the AES-NI instruction set be kind

Re: [openssl-users] Re: having a lot of troubles trying to get AES-NI working

2013-03-15 Thread Matthew Hall
On Sat, Mar 16, 2013 at 12:06:07AM -0400, Ewen Chan wrote: > That's MUCH faster than I expect it to be (even with AES-NI) and the > 888 MB/s is faster than any available storage host-bus interface we've > got right now; so I want to make sure that I am not losing my marbles > here in trying to make

Re: [openssl-users] Re: having a lot of troubles trying to get AES-NI working

2013-03-15 Thread Ewen Chan
Do these number make sense or seem reasonable? (I'm running a Core i7 3930K that's been OC'd to 4.5 GHz up from the stock 3.2 GHz, running cygwin 1.7.17 on Windows 7 x64 Professional, with 64 GB of DDR3-1600) ~$ OPENSSL_ia32cap="~0x202" openssl speed -elapsed -evp aes-256-cbc You have

Re: [openssl-users] Re: having a lot of troubles trying to get AES-NI working

2013-03-15 Thread Ewen Chan
a...okay. Gotcha. Thanks! On Fri, Mar 15, 2013 at 5:23 AM, Erwann Abalea wrote: > On a PC under Linux, you can do a "cat /proc/cpuinfo" and look for "aes" in > the "flags". > On a PC under any OS, get the CPUID, and look for bit 25 of ECX. > That's not OpenSSL-related. > > > The use of OPENS

Re: [openssl-users] Re: having a lot of troubles trying to get AES-NI working

2013-03-15 Thread Erwann Abalea
On a PC under Linux, you can do a "cat /proc/cpuinfo" and look for "aes" in the "flags". On a PC under any OS, get the CPUID, and look for bit 25 of ECX. That's not OpenSSL-related. The use of OPENSSL_ia32cap environment variable allows you to alter the CPUID result (only inside OpenSSL), and