On Mon, Jun 09, 2014 at 10:11:08PM +0200, wessels wrote:
> Thanks Sime,
>
> yes setting kern.usercrypto=1 did the trick. Apparently in OpenBSD 4.4 that
> was enabled by default and this was changed in a later release.
>
> # sysctl kern.usercrypto=1
> kern.usercrypto: 0 -> 1
> # openssl speed -evp aes-128-cbc -engine cryptodev
> engine "cryptodev" set.
> Doing aes-128-cbc for 3s on 16 size blocks: 162949 aes-128-cbc's in 0.17s
> Doing aes-128-cbc for 3s on 64 size blocks: 154781 aes-128-cbc's in 0.17s
> Doing aes-128-cbc for 3s on 256 size blocks: 124542 aes-128-cbc's in 0.13s
> Doing aes-128-cbc for 3s on 1024 size blocks: 69869 aes-128-cbc's in 0.10s
> Doing aes-128-cbc for 3s on 8192 size blocks: 13602 aes-128-cbc's in 0.04s
> OpenSSL 1.0.1c 10 May 2012
> built on: date not available
> options:bn(64,32) rc4(4x,int) des(ptr,risc1,16,long) aes(partial) idea(int)
> blowfish(idx)
> compiler: information not available
> The 'numbers' are in 1000s of bytes per second processed.
> type 16 bytes 64 bytes 256 bytes 1024 bytes 8192
> bytes
> aes-128-cbc 15336.38k 58270.49k 245251.94k 715458.56k
> 2785689.60k
>
> Sometime these things are so simple but the information isn't findable. I
> hope that people stumbling upon this problem as find this thread.
>
> Thanks again,
>
> Wessels
But check if it really helps in your case, and not just openssl speed calls.
It was disabled for a reason.
-Otto
