CVSROOT: /cvs
Module name: src
Changes by: js...@cvs.openbsd.org 2025/04/18 07:19:39
Modified files:
lib/libcrypto/arch/amd64: Makefile.inc
lib/libcrypto/arch/i386: Makefile.inc
lib/libcrypto/evp: e_aes.c
Log message:
Remove BS-AES and VP-AES from EVP.
The bitsliced and vector permutation AES implementations were created
around 2009, in attempts to speed up AES on Intel hardware. Both require
SSSE3 which existed from around 2006. Intel introduced AES-NI in 2008 and
a large percentage of Intel/AMD CPUs made in the last 15 years include it.
AES-NI is significantly faster and requires less code.
Furthermore, the BS-AES and VP-AES implementations are wired directly into
EVP (as is AES-NI currently), which means that any consumers of the AES_*
API are not able to benefit from acceleration. Removing these greatly
simplifies the EVP AES code - if you just happen to have a CPU that
supports SSSE3 but not AES-NI, then you'll now use the regular AES assembly
implementations instead.
ok kettenis@ tb@
