On Mon, 24 Apr 2006 10:27:38 -0400 Pawel Jakub Dawidek <[EMAIL PROTECTED]> wrote:
> On Sun, Apr 23, 2006 at 09:16:13PM +0200, Oliver Fromme wrote: > +> Winston Tsai <[EMAIL PROTECTED]> wrote: > +> > I got roughly the same performance results when I use the openssl > speed > +> > test with and without a hifn 7956 cryto card > +> > [...] > +> > Then I ran: > +> > Openssl speed des-cbc > +> > [...] > +> > My understanding is that openssl will detect the presence of an > +> > accelerator card and use it (via \dev\crypto) instead of the > crypto > +> > library. > +> > Did I miss something here? > +> > +> I don't know if the openssl speed test picks up the crypto- > +> dev hardware automatically. But ssh/scp definitely does. > +> > +> I have run several tests on my VIA C3 Nehemiah+RNG+ACE, > +> which accelerates AES encryption. When the padlock(4) > +> module is loaded (it contains the Nehemiah ACE support), > +> ssh/scp performance is roughly doubled. It's quite > +> noticeable when transfering large files. > +> > +> Best regards > +> Oliver > +> > +> PS: I can provide some benchmark numbers if interested. > > The problem is that OpenSSL don't know how to accelerate AES192 and > AES256 with cryptodev. The patch which fix this is available here: > > http://people.freebsd.org/~pjd/patches/hw_cryptodev.c.patch > > PS. For AES128 cryptodev can be used without the patch. > > -- > Pawel Jakub Dawidek http://www.wheel.pl > [EMAIL PROTECTED] http://www.FreeBSD.org > FreeBSD committer Am I Evil? Yes, I Am! Have the lockups associated with using hifn been solved as well? I had a big problem using hifn with GELI and haven't heard or seen anything else about it. Nick _______________________________________________ [email protected] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-security To unsubscribe, send any mail to "[EMAIL PROTECTED]"
