Date: Sun, 23 Apr 2006 21:16:13 +0200 (CEST) From: Oliver Fromme <olli@lurza.secnetix.de> To: freebsd-security@FreeBSD.ORG Subject: Re: Crypto hw acceleration for openssl Message-ID: <200604231916.k3NJGDph098368@lurza.secnetix.de> In-Reply-To: <CFA9FA7615FFD04DB8FD8E34A3FF7F46022BB92A@sjcxch02.tbu.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Winston Tsai <wtsai@hifn.com> wrote: > I got roughly the same performance results when I use the openssl speed > test with and without a hifn 7956 cryto card > [...] > Then I ran: > Openssl speed des-cbc > [...] > My understanding is that openssl will detect the presence of an > accelerator card and use it (via \dev\crypto) instead of the crypto > library. > Did I miss something here? I don't know if the openssl speed test picks up the crypto- dev hardware automatically. But ssh/scp definitely does. I have run several tests on my VIA C3 Nehemiah+RNG+ACE, which accelerates AES encryption. When the padlock(4) module is loaded (it contains the Nehemiah ACE support), ssh/scp performance is roughly doubled. It's quite noticeable when transfering large files. Best regards Oliver PS: I can provide some benchmark numbers if interested. -- Oliver Fromme, secnetix GmbH & Co. KG, Marktplatz 29, 85567 Grafing Dienstleistungen mit Schwerpunkt FreeBSD: http://www.secnetix.de/bsd Any opinions expressed in this message may be personal to the author and may not necessarily reflect the opinions of secnetix in any way. "The scanf() function is a large and complex beast that often does something almost but not quite entirely unlike what you desired." -- Chris Torek
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200604231916.k3NJGDph098368>