Date: Mon, 26 Jan 2004 11:30:22 -0500 From: Charles Swiger <cswiger@mac.com> To: Rumen Telbizov <altares@e-card.bg> Cc: stable@freebsd.org Subject: Re: FreeBSD + Rainbow Cryptoswift Message-ID: <EFEE6595-501C-11D8-B821-003065A20588@mac.com> In-Reply-To: <20040126155600.GB230@e-card.bg> References: <20040126091424.GI688@e-card.bg> <6889E365-5016-11D8-B821-003065A20588@mac.com> <20040126155600.GB230@e-card.bg>
next in thread | previous in thread | raw e-mail | index | archive | help
On Jan 26, 2004, at 10:56 AM, Rumen Telbizov wrote:
[ ... ]
> I don't see anything related to RSA computations?!
> Do you see any real acceleration in the RSA operations
> while using this card or there is NO support for RSA in
> the crypto device ?
It might be worth asking the author of cryptodev and hifn whether the
manpage is current with regard to RSA support. For my purposes, adding
entropy and speeding up 3DES for ssh is useful, but you are right that
HTTPS acceleration will want RSA.
The hifn cards will do ARC4/MD5/SHA, which is still helpful to your
situation, but doing SSL session startup with a 1024-bit RSA server
certificate tends to be the hit that slows down a busy site, not
streaming 40/128-bit encryption afterwards.
Here's the results of an "openssl speed" on a machine with a 933MHz
Tualatin:
OpenSSL 0.9.7c 30 Sep 2003
built on: Mon Jan 19 17:09:38 EST 2004
options:bn(64,32) md2(int) rc4(idx,int) des(ptr,risc1,16,long)
aes(partial) blowfish(idx)
compiler: cc
available timing options: USE_TOD HZ=128 [sysconf value]
timing function used: getrusage
The 'numbers' are in 1000s of bytes per second processed.
type 16 bytes 64 bytes 256 bytes 1024 bytes 8192
bytes
md2 620.93k 1321.03k 1840.87k 2043.58k
2109.85k
mdc2 1216.23k 1340.13k 1379.00k 1386.49k
1392.69k
md4 5238.60k 18516.78k 53933.28k 103206.39k
141003.58k
md5 3403.53k 10198.36k 23224.80k 34163.24k
39580.86k
hmac(md5) 1853.72k 6250.73k 17093.20k 30202.23k
38852.70k
sha1 3834.47k 9754.21k 23442.41k 36293.86k
43284.01k
rmd160 3402.43k 9754.38k 20798.38k 28830.32k
32526.01k
rc4 63056.66k 72429.52k 76481.40k 76876.09k
77175.42k
des cbc 5793.26k 5932.76k 5974.18k 5984.65k
5987.75k
des ede3 2522.17k 2549.38k 2560.15k 2562.74k
2565.13k
idea cbc 0.00 0.00 0.00 0.00
0.00
rc2 cbc 7170.32k 7373.37k 7451.72k 7474.13k
7527.15k
rc5-32/12 cbc 36376.64k 42649.09k 45031.39k 45666.52k
45844.24k
blowfish cbc 15556.50k 16535.16k 16851.46k 16930.07k
16962.81k
cast cbc 15316.29k 16194.30k 16490.12k 16564.61k
16580.42k
aes-128 cbc 14087.20k 14768.17k 14920.34k 14969.05k
14981.57k
aes-192 cbc 12415.22k 12648.94k 12721.03k 12741.74k
12740.70k
aes-256 cbc 11021.74k 11247.24k 11286.85k 11298.91k
11300.38k
sign verify sign/s verify/s
rsa 512 bits 0.0031s 0.0003s 326.2 3032.8
rsa 1024 bits 0.0161s 0.0009s 61.9 1114.6
rsa 2048 bits 0.0959s 0.0029s 10.4 346.7
rsa 4096 bits 0.6236s 0.0098s 1.6 101.9
sign verify sign/s verify/s
dsa 512 bits 0.0026s 0.0033s 382.9 304.3
dsa 1024 bits 0.0079s 0.0097s 126.8 102.6
dsa 2048 bits 0.0263s 0.0319s 38.1 31.3
396.70s real 395.67s user 0.03s system 99%
--
-Chuck
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?EFEE6595-501C-11D8-B821-003065A20588>