From owner-freebsd-hackers@FreeBSD.ORG Mon Sep 15 15:53:29 2014 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 2D24F34E for ; Mon, 15 Sep 2014 15:53:29 +0000 (UTC) Received: from mail-wi0-x22e.google.com (mail-wi0-x22e.google.com [IPv6:2a00:1450:400c:c05::22e]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id B871A7CE for ; Mon, 15 Sep 2014 15:53:28 +0000 (UTC) Received: by mail-wi0-f174.google.com with SMTP id n3so4527669wiv.7 for ; Mon, 15 Sep 2014 08:53:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=20120113; h=date:from:to:subject:message-id:in-reply-to:references:mime-version :content-type:content-transfer-encoding; bh=nnD1QjZJ0ee6u3iDHMpTYLON/WHuFTPsRdN1Vt9MRvQ=; b=PcFYFbuDQQYOj9rC5IVolXbF89MvJhrJUgOz3KMiTJxKpcfmu/zEvgvVaNWcPTnQ1o cfRqlSWvc29hS0vAEZRoKHZJIZ2jOHpRPSbKn6giCaCedPt0CV9ou7CKfP/Go9cfspJw dTvGQDI00nxYMFI8I5JW+X9uOmgmm75rIr1koqI4g1QL+IJCfptfoAE6uJzguVGenD3e eyjiGydvmyeUvLbcOxcnHlLPyPY+lcgaerUFEcc0QDJGR/zKZy1MQwLYO7oybpGqoqFM zOEN2WT7NWsUjofcBldeFl054FoKe4V9qeVMIr/bYG2IQFvEVTE6Xsl6H+yfIh6vjt1c wgcQ== X-Received: by 10.180.231.3 with SMTP id tc3mr13217872wic.18.1410796406890; Mon, 15 Sep 2014 08:53:26 -0700 (PDT) Received: from gumby.homeunix.com ([94.195.197.245]) by mx.google.com with ESMTPSA id lv7sm12105571wic.16.2014.09.15.08.53.25 for (version=SSLv3 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Mon, 15 Sep 2014 08:53:26 -0700 (PDT) Date: Mon, 15 Sep 2014 16:53:23 +0100 From: RW To: freebsd-hackers@freebsd.org Subject: Re: openssl with aes-in or padlock Message-ID: <20140915165323.1c951385@gumby.homeunix.com> In-Reply-To: <20140912004541.GQ82175@funkthat.com> References: <20140911180258.GN82175@funkthat.com> <20140912004541.GQ82175@funkthat.com> X-Mailer: Claws Mail 3.10.1 (GTK+ 2.24.22; amd64-portbld-freebsd10.0) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Sep 2014 15:53:29 -0000 On Thu, 11 Sep 2014 17:45:41 -0700 John-Mark Gurney wrote: > Wojciech Puchar wrote this message on Thu, Sep 11, 2014 at 23:33 > +0200: > > >GEOM_ELI: Encryption: AES-XTS 256 > > >GEOM_ELI: Crypto: hardware > > > > yes i have this. contrary to what you say - both AES-XTC and > > AES-CBC gets MUCH faster with AES-NI. > > Well, AES-NI CBC may be faster w/ AES-NI, but it's not as fast as > using another mode... AES-XTS should be many times faster than > CBC... GELI was around for a long time before it had AES-XTS, and I presume it uses its kernel threads to process multiple sectors in parallel. In that case XTS and CBC would both get a similar benefit from SMP.