Thanks Sime, yes setting kern.usercrypto=1 did the trick. Apparently in OpenBSD 4.4 that was enabled by default and this was changed in a later release.
# sysctl kern.usercrypto=1 kern.usercrypto: 0 -> 1 # openssl speed -evp aes-128-cbc -engine cryptodev engine "cryptodev" set. Doing aes-128-cbc for 3s on 16 size blocks: 162949 aes-128-cbc's in 0.17s Doing aes-128-cbc for 3s on 64 size blocks: 154781 aes-128-cbc's in 0.17s Doing aes-128-cbc for 3s on 256 size blocks: 124542 aes-128-cbc's in 0.13s Doing aes-128-cbc for 3s on 1024 size blocks: 69869 aes-128-cbc's in 0.10s Doing aes-128-cbc for 3s on 8192 size blocks: 13602 aes-128-cbc's in 0.04s OpenSSL 1.0.1c 10 May 2012 built on: date not available options:bn(64,32) rc4(4x,int) des(ptr,risc1,16,long) aes(partial) idea(int) blowfish(idx) compiler: information not available The 'numbers' are in 1000s of bytes per second processed. type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-128-cbc 15336.38k 58270.49k 245251.94k 715458.56k 2785689.60k Sometime these things are so simple but the information isn't findable. I hope that people stumbling upon this problem as find this thread. Thanks again, Wessels
