From owner-freebsd-security@FreeBSD.ORG  Wed Aug 28 05:19:19 2013
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTP id E7FAB314
 for <freebsd-security@freebsd.org>; Wed, 28 Aug 2013 05:19:19 +0000 (UTC)
 (envelope-from dewayne.geraghty@heuristicsystems.com.au)
Received: from nskntmtas03p.mx.bigpond.com (nskntmtas03p.mx.bigpond.com
 [61.9.168.143]) by mx1.freebsd.org (Postfix) with ESMTP id 84E612AB8
 for <freebsd-security@freebsd.org>; Wed, 28 Aug 2013 05:19:19 +0000 (UTC)
Received: from nskntcmgw09p ([61.9.169.169]) by nskntmtas03p.mx.bigpond.com
 with ESMTP
 id <20130828051912.BAOK1983.nskntmtas03p.mx.bigpond.com@nskntcmgw09p>;
 Wed, 28 Aug 2013 05:19:12 +0000
Received: from hermes.heuristicsystems.com.au ([58.172.113.247])
 by nskntcmgw09p with BigPond Outbound
 id J5KB1m00N5LKYmq015KBpF; Wed, 28 Aug 2013 05:19:12 +0000
X-Authority-Analysis: v=2.0 cv=APSpfbFe c=1 sm=1
 a=YibVxx38Z+cwdCKSMcELyg==:17 a=gtMxIXxmAI4A:10 a=twTT4oUKOlYA:10
 a=kj9zAlcOel0A:10 a=GHIR_BbyAAAA:8 a=zj7oWWcsScEA:10 a=dOwBb8GsjfbD2fuA2ZwA:9
 a=CjuIK1q_8ugA:10 a=g-8GH8jFSXgA:10 a=uELCwYtBvEgA:10
 a=YibVxx38Z+cwdCKSMcELyg==:117
Received: from white (white.hs [10.0.5.2]) (authenticated bits=0)
 by hermes.heuristicsystems.com.au (8.14.5/8.13.6) with ESMTP id r7S5Ih1S019690;
 Wed, 28 Aug 2013 15:18:43 +1000 (EST)
 (envelope-from dewayne.geraghty@heuristicsystems.com.au)
From: "Dewayne Geraghty" <dewayne.geraghty@heuristicsystems.com.au>
To: "'John-Mark Gurney'" <jmg@funkthat.com>,
 "'Ollivier Robert'" <roberto@keltia.freenix.fr>
References: <20130827153205.GA48196@roberto02-aw.eurocontrol.fr>
 <20130828022728.GR29777@funkthat.com>
Subject: RE: security/openssl speed issues
Date: Wed, 28 Aug 2013 15:18:43 +1000
Message-ID: <D02D3E9B028745EFB7EB67D1D7B0A723@white>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
In-Reply-To: <20130828022728.GR29777@funkthat.com>
Thread-Index: Ac6jljr2hiVn5VVBT8KumsoyVknLvQAD0Rkg
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.6157
X-Mailman-Approved-At: Wed, 28 Aug 2013 11:22:11 +0000
Cc: freebsd-security@freebsd.org
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: "Security issues \[members-only posting\]"
 <freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 28 Aug 2013 05:19:20 -0000

John,Ollivier,

I've found the openssl speed tests to be an unreliable measure of comparison.  I think you might be better served by comparing the
performance of encrypting/decrypting content, such as
 
dd if=/dev/zero bs=1M count=100 | openssl aes-128-cbc -e -pass pass:secretpwd | \
 openssl aes-128-cbc -d -pass pass:secretpwd >> /dev/null

And for a baseline use
dd if=/dev/zero bs=1M count=100 >> /dev/null 

Kind regards, Dewayne