On Thu, Nov 7, 2013 at 9:44 AM, Vick Khera <[email protected]> wrote:

> CLEARLY it is killer fast for larger blocks.


I just pondered this for a few minutes... I think openssl's summary numbers
are misleading. They give you the time per CPU seconds used. So while the
CPU is not doing the computations, the number of computations done in 3
seconds is significantly lower with aesni loaded. Thus it only takes a
fraction of a second of CPU time over the 3 seconds elapsed, and they use
that as the divisor for the bytes per second processed. This is clearly
wrong, as all the CPU is doing is managing the work not the actual work.

So I fall back to my original thought that it may do more harm than good to
enable aesni.
_______________________________________________
List mailing list
[email protected]
http://lists.pfsense.org/mailman/listinfo/list

Reply via email to