Date: Sun, 24 May 2015 22:21:57 -0700 From: John-Mark Gurney <jmg@funkthat.com> To: Kevin Day <toasty@dragondata.com> Cc: freebsd-security@freebsd.org Subject: Re: Atom C2758 - loading aesni(4) reduces performance Message-ID: <20150525052157.GC37063@funkthat.com> In-Reply-To: <687C0C52-08FA-4234-9A64-527163EED3C8@dragondata.com> References: <6BA42026-C785-40B5-B9CF-DD4280693C41@dragondata.com> <20150524224454.GX37063@funkthat.com> <687C0C52-08FA-4234-9A64-527163EED3C8@dragondata.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Kevin Day wrote this message on Sun, May 24, 2015 at 23:15 -0500:
> > On May 24, 2015, at 5:44 PM, John-Mark Gurney <jmg@funkthat.com> wrote:
> >
> > If you have cryptodev loaded, this is to be expected as OpenSSL will
> > use /dev/crypto instead of the AES-NI instructions.. Just don't load
> > cryptodev and you'll be fine..
>
> So to make sure I???m understanding??? openssl has native AES-NI support, and it also can use /dev/crypto. It???s preferring /dev/crypto, but /dev/crypto has much higher overhead?
Correct... At least OpenSSL 1.0.1 that started shipping w/ 10.0 has
native AES-NI support... Pre-10.0 doesn't have it...
--
John-Mark Gurney Voice: +1 415 225 5579
"All that I will do, has been done, All that I have, has not."
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20150525052157.GC37063>