Marcy, with
#openssl_conf = openssl_def jbsp124:~ # openssl speed -evp des-ede3-cbc Doing des-ede3-cbc for 3s on 16 size blocks: 4132050 des-ede3-cbc's in 2.94s Doing des-ede3-cbc for 3s on 64 size blocks: 1090654 des-ede3-cbc's in 2.95s Doing des-ede3-cbc for 3s on 256 size blocks: 276504 des-ede3-cbc's in 2.97s Doing des-ede3-cbc for 3s on 1024 size blocks: 69077 des-ede3-cbc's in 2.96s Doing des-ede3-cbc for 3s on 8192 size blocks: 8580 des-ede3-cbc's in 2.94s OpenSSL 0.9.8a 11 Oct 2005 built on: Mon Jul 27 13:51:43 UTC 2009 options:bn(64,64) md2(int) rc4(ptr,int) des(idx,cisc,4,long) aes(partial) blowfish(idx) compiler: gcc -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DB_ENDIAN -DNO_ASM -DMD32_REG_T=int -O2 -fmessage-length=0 -Wall -g -fomit-frame-pointer -fno-strict-aliasing -DTERMIO -Wall -fstack-protector -fbranch-probabilities -DB_ENDIAN -DNO_ASM available timing options: TIMES TIMEB HZ=100 [sysconf value] timing function used: times The 'numbers' are in 1000s of bytes per second processed. type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes des-ede3-cbc 22487.35k 23661.65k 23833.34k 23896.91k 23907.27k with openssl_conf = openssl_def jbsp124:~ # vi /etc/ssl/openssl.cnf jbsp124:~ # openssl speed -evp des-ede3-cbc Doing des-ede3-cbc for 3s on 16 size blocks: 12827073 des-ede3-cbc's in 2.97s Doing des-ede3-cbc for 3s on 64 size blocks: 8270315 des-ede3-cbc's in 2.97s Doing des-ede3-cbc for 3s on 256 size blocks: 3360218 des-ede3-cbc's in 2.97s Doing des-ede3-cbc for 3s on 1024 size blocks: 1006040 des-ede3-cbc's in 2.98s Doing des-ede3-cbc for 3s on 8192 size blocks: 132563 des-ede3-cbc's in 2.98s OpenSSL 0.9.8a 11 Oct 2005 built on: Mon Jul 27 13:51:43 UTC 2009 options:bn(64,64) md2(int) rc4(ptr,int) des(idx,cisc,4,long) aes(partial) blowfish(idx) compiler: gcc -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DB_ENDIAN -DNO_ASM -DMD32_REG_T=int -O2 -fmessage-length=0 -Wall -g -fomit-frame-pointer -fno-strict-aliasing -DTERMIO -Wall -fstack-protector -fbranch-probabilities -DB_ENDIAN -DNO_ASM available timing options: TIMES TIMEB HZ=100 [sysconf value] timing function used: times The 'numbers' are in 1000s of bytes per second processed. type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes des-ede3-cbc 69102.08k 178215.54k 289634.95k 345699.65k 364414.80k jbsp124:~ # On Mon, Feb 14, 2011 at 7:19 PM, Marcy Cortes <[email protected] > wrote: > You have no card accessible to Linux. > > Do you have a OPTION CRYPTO APVIRT in your directory entry > What do you get when you type > > Q CRYPTO AP on VM. > > > > Marcy > > > -----Original Message----- > From: Linux on 390 Port [mailto:[email protected]] On Behalf Of > Rogério Soares > Sent: Monday, February 14, 2011 1:14 PM > To: [email protected] > Subject: Re: [LINUX-390] crypto with sshd > > and yes, i'm running under vm 6.1. > > > > On Mon, Feb 14, 2011 at 7:07 PM, Marcy Cortes < > [email protected] > > wrote: > > > I'm pretty sure SLES 10 SP3's openssh is already built correctly and you > > should not have to rebuild it. > > What do you get when you > > cat /proc/drivers/z90crypt (please post) > > Are you running under VM? > > > > > > Marcy > > > > -----Original Message----- > > From: Linux on 390 Port [mailto:[email protected]] On Behalf Of > > Rogério Soares > > Sent: Monday, February 14, 2011 12:53 PM > > To: [email protected] > > Subject: Re: [LINUX-390] crypto with sshd > > > > i get the rpm source version from SLES10SP3 to openssh-4.2p1-18.40.35 > > package and change de spec file to include --ssl-engine and made a > rpmbuild > > .. that is why asking.. on paper is not clear if the change is only this > or > > something more... thanks anyway. > > > > > > > > On Mon, Feb 14, 2011 at 6:43 PM, Mark Post <[email protected]> wrote: > > > > > >>> On 2/14/2011 at 03:08 PM, Rogério Soares<[email protected]> > > > wrote: > > > > Mark, i already did it too.. > > > > > > > > jbsp124:~ # openssl engine > > > > (dynamic) Dynamic engine loading support > > > > (ibmca) Ibmca hardware engine support > > > > jbsp124:~ # > > > > jbsp124:~ # > > > > jbsp124:~ # rpm -qa | grep openss > > > > openssl-devel-0.9.8a-18.36 > > > > openssl-0.9.8a-18.36 > > > > openssh-askpass-4.2p1-18.40.35 > > > > openssl-ibmca-1.0.0-7.16 > > > > compat-openssl097g-0.9.7g-13.16 > > > > openssh-4.2p1-18.40.35 > > > > > > > > on sshd server the only change is enable --ssl-engine ? > > > > > > You need to have a version of openSSH with the patch that actually > > enables > > > the use of SSL. In the IBM paper, they were working with an modified > > > version of openssh-5.1p1. I doubt very much that a copy of the 4.2p1 > > source > > > is going to have that. > > > > > > > > > Mark Post > > > > > > ---------------------------------------------------------------------- > > > For LINUX-390 subscribe / signoff / archive access instructions, > > > send email to [email protected] with the message: INFO LINUX-390 > or > > > visit > > > http://www.marist.edu/htbin/wlvindex?LINUX-390 > > > ---------------------------------------------------------------------- > > > For more information on Linux on System z, visit > > > http://wiki.linuxvm.org/ > > > > > > > ---------------------------------------------------------------------- > > For LINUX-390 subscribe / signoff / archive access instructions, > > send email to [email protected] with the message: INFO LINUX-390 or > > visit > > http://www.marist.edu/htbin/wlvindex?LINUX-390 > > ---------------------------------------------------------------------- > > For more information on Linux on System z, visit > > http://wiki.linuxvm.org/ > > > > ---------------------------------------------------------------------- > > For LINUX-390 subscribe / signoff / archive access instructions, > > send email to [email protected] with the message: INFO LINUX-390 or > > visit > > http://www.marist.edu/htbin/wlvindex?LINUX-390 > > ---------------------------------------------------------------------- > > For more information on Linux on System z, visit > > http://wiki.linuxvm.org/ > > > > ---------------------------------------------------------------------- > For LINUX-390 subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO LINUX-390 or > visit > http://www.marist.edu/htbin/wlvindex?LINUX-390 > ---------------------------------------------------------------------- > For more information on Linux on System z, visit > http://wiki.linuxvm.org/ > > ---------------------------------------------------------------------- > For LINUX-390 subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO LINUX-390 or > visit > http://www.marist.edu/htbin/wlvindex?LINUX-390 > ---------------------------------------------------------------------- > For more information on Linux on System z, visit > http://wiki.linuxvm.org/ > ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 ---------------------------------------------------------------------- For more information on Linux on System z, visit http://wiki.linuxvm.org/
