Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 13 Sep 2014 09:34:35 +0200 (CEST)
From:      Wojciech Puchar <wojtek@puchar.net>
To:        John-Mark Gurney <jmg@funkthat.com>
Cc:        hackers@freebsd.org
Subject:   Re: openssl with aes-in or padlock
Message-ID:  <alpine.BSF.2.00.1409130933410.18147@wojtek.dom>
In-Reply-To: <20140912004541.GQ82175@funkthat.com>
References:  <alpine.BSF.2.00.1409111858470.1185@wojtek.dom> <20140911180258.GN82175@funkthat.com> <alpine.BSF.2.00.1409112332160.2140@wojtek.dom> <20140912004541.GQ82175@funkthat.com>

next in thread | previous in thread | raw e-mail | index | archive | help
>> MUCH faster with AES-NI.
>
> Well, AES-NI CBC may be faster w/ AES-NI, but it's not as fast as using
> another mode...  AES-XTS should be many times faster than CBC...  Also,

30% maybe with geli.

> above you compared two different modes... on CBC encrypt (the OpenSSL
> test) and CBC decrypt (the geli test) so of course you're going to get
> very different performances...
>
> You didn't tell me if you're using a new enough version of OpenSSL or
> not..  What release are you using?  iirc, 10.0-R was the first release
OpenSSL 1.0.1e-freebsd 11 Feb 2013




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?alpine.BSF.2.00.1409130933410.18147>