Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 8 Mar 2012 06:34:15 +1300
From:      Andrew Thompson <thompsa@FreeBSD.org>
To:        Karl Denninger <karl@denninger.net>
Cc:        Ian Lepore <freebsd@damnhippie.dyndns.org>, freebsd-stable@freebsd.org
Subject:   Re: Xeon Processors with AES instructions and geli encryption
Message-ID:  <CAFAOGNQ0b9dz5m7-kPoWSmMD3_CvzDXv%2BLhztx5MKBovwFXoAw@mail.gmail.com>
In-Reply-To: <4F5785D0.4010708@denninger.net>
References:  <4F577A24.9030307@denninger.net> <1331135702.32194.23.camel@revolution.hippie.lan> <4F5785D0.4010708@denninger.net>

next in thread | previous in thread | raw e-mail | index | archive | help
FYI, there is a bug in 8.2 for 256b keys and was fixed in 8.2-stable.
You may want to apply the fix if it causes you issues.

http://www.FreeBSD.org/cgi/query-pr.cgi?pr=3D155118


Andrew

On 8 March 2012 04:59, Karl Denninger <karl@denninger.net> wrote:
> Thanks; the machines in question are on 8.2, so this sounds pretty good.
>
> On 3/7/2012 9:55 AM, Ian Lepore wrote:
>> On Wed, 2012-03-07 at 09:09 -0600, Karl Denninger wrote:
>>> Does the crypto(9) framework recognize and use these instructions?
>>> Looks like the Windmere-series Xeons will drop into my system boards; I
>>> gain two cores per CPU at the same time, so I'll go from an 8-way SMP
>>> system to a 12-way one.
>>>
>>> I am considering spending the money to upgrade a couple of servers here
>>> that run geli-encrypted disks, as during heavy I/O they spend a LOT of
>>> their CPU time on the disk encryption. =A0The differences I see in the =
use
>>> of TrueCrypt on Windows machines that have AES instructions .vs. those
>>> that do not are very significant and I'm curious if this carries over t=
o
>>> FreeBSD.
>>>
>>> Thanks in advance!
>>>
>> It looks like it does as of 8.2 when the aesni driver was added.
>>
>> -- Ian
>>
>>
>> _______________________________________________
>> freebsd-stable@freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-stable
>> To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org=
"
>>
>>
>> %SPAMBLOCK-SYS: Matched [@freebsd.org+], message ok
>
> --
> -- Karl Denninger
> /The Market Ticker =AE/ <http://market-ticker.org>;
> Cuda Systems LLC
> _______________________________________________
> freebsd-stable@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-stable
> To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org"



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAFAOGNQ0b9dz5m7-kPoWSmMD3_CvzDXv%2BLhztx5MKBovwFXoAw>