From owner-freebsd-hackers@FreeBSD.ORG  Thu May 22 01:21:15 2003
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 53C3937B401
	for <hackers@freebsd.org>; Thu, 22 May 2003 01:21:15 -0700 (PDT)
Received: from bastix.tunix.nl (bastix.tunix.nl [193.79.201.39])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 13CB843F75
	for <hackers@freebsd.org>; Thu, 22 May 2003 01:21:14 -0700 (PDT)
	(envelope-from rene@canyon.xs4all.nl)
Received: (from root@localhost) by bastix.tunix.nl (8.9.3c/8.6.12) id KAA30266
	for <hackers@freebsd.org>; Thu, 22 May 2003 10:21:41 +0200 (CEST)
Received: by bastix.tunix.nl (TUNIX txp2/smap)
	for <hackers@freebsd.org> id sma029916; Thu, 22 May 03 10:20:51 +0200
Date: Thu, 22 May 2003 10:20:30 +0200
Mime-Version: 1.0 (Apple Message framework v552)
Content-Type: text/plain; charset=US-ASCII; format=flowed
From: Rene de Vries <rene@canyon.xs4all.nl>
To: hackers@freebsd.org
Content-Transfer-Encoding: 7bit
Message-Id: <406B3072-8C2E-11D7-A0FF-00039357FA7A@canyon.xs4all.nl>
X-Mailer: Apple Mail (2.552)
Subject: Hardware crypto support, ubsec RSA performance
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 22 May 2003 08:21:15 -0000

Hello,

I've been testing with an "Broadcom CryptoNetX SSL800" card and the 
performance (when testing with openssl) is a bit disapointing. I would 
expect about 800 (or nearly 800) sign/s, but in stead the card+openssl 
only do about 94 sign/s (with 1024 bit RSA keys). This is less than one 
eigth of what I expected. Am I doing something wrong or is there some 
magic that I need to perform?

Rene

Measurements done on FreeBSD 4.8.
System: Pentium III 930Mhz (256Mb memory).
Using "Openssl speed rsa -elapsed" (version 0.9.7a).

With Broadcom CryptoNetX SSL800 (BM5820/ubsec):

                   sign    verify    sign/s verify/s
rsa  512 bits   0.0027s   0.0001s    369.9   8541.5
rsa 1024 bits   0.0106s   0.0002s     94.7   5392.2
rsa 2048 bits   0.1586s   0.0010s      6.3   1014.4
rsa 4096 bits   2.2629s   0.0105s      0.4     95.1

Without hardware encryption:

                   sign    verify    sign/s verify/s
rsa  512 bits   0.0031s   0.0003s    324.7   3599.0
rsa 1024 bits   0.0170s   0.0009s     59.0   1172.5
rsa 2048 bits   0.1026s   0.0029s      9.8    350.6
rsa 4096 bits   0.6629s   0.0098s      1.5    101.8

--
Rene de Vries <rene@tunix.nl>
TUNIX Internet Security & Training