Hi,
i have a Netra-T1 running Solaris-2.8. A CryptoSwift-PCI card is
installed and functional:
CryptoSwift Diagnostics & Maintenance
Driver Info
API Version: 2.0.4
Driver Version: 2.0.2
Accelerators: 1
Command Bitmap: 000000000000000000000007F
Interrupts Serviced: 33519
Interrupts Received: 33519
Requests Attempted: 33519
Requests Completed: 33519
Max Pending Size: 1
Current Pending Size: 0
I tested both openssl-0.96 and openssl-SNAP-20001102. All tests with
hw support were started like this:
OpenSSL> speed -engine cswift
engine "cswift" set.
Results (0.96):
Doing cast cbc for 3s on 8192 size blocks: 2459 cast cbc's in 2.98s
Doing 512 bit private rsa's for 10s: RSA sign failure
10438:error:26067072:engine routines:CSWIFT_MOD_EXP_CRT:request
failed:hw_cswift.c:524:CryptoSwift error number is -10004
1 512 bit private RSA's in 0.27s
Doing 512 bit public rsa's for 10s: RSA verify failure
10438:error:26066072:engine routines:CSWIFT_MOD_EXP:request
failed:hw_cswift.c:413:CryptoSwift error number is -10004
1 512 bit public RSA's in 1.47s
Doing 512 bit sign dsa's for 10s: DSA sign failure
10438:error:26085072:engine routines:CSWIFT_DSA_SIGN:request
failed:hw_cswift.c:660:CryptoSwift error number is -10004
1 512 bit DSA signs in 0.80s
DSA verify failure. No DSA verify will be done.
10438:error:0D06B078:asn1 encoding routines:ASN1_get_object:header too
long:asn1_lib.c:139:
10438:error:0A06E004:dsa routines:d2i_DSA_SIG:nested asn1 error:dsa_asn1.c:92:
OpenSSL 0.9.6 [engine] 24 Sep 2000
built on: Mon Oct 23 22:35:27 MEST 2000
options:bn(64,32) md2(int) rc4(ptr,char) des(idx,cisc,16,long) blowfish(ptr)
compiler: gcc -fPIC -DTHREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DNO_IDEA -fPIC
-mcpu=ultrasparc -O3 -fomit-frame-pointer -Wall -DB_ENDIAN -DBN_DIV2W -DULTRASPARC
-DMD5_ASM
The 'numbers' are in 1000s of bytes per second processed.
type 8 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes
md2 346.47k 971.58k 1319.85k 1446.05k 1485.48k
mdc2 939.21k 997.08k 1004.37k 1005.35k 1011.29k
md4 5553.67k 24810.00k 41928.02k 51023.56k 54164.72k
md5 4100.68k 19350.37k 34569.39k 43112.12k 46480.70k
hmac(md5) 1389.42k 8043.11k 21245.44k 35960.67k 45308.06k
sha1 2733.81k 12096.19k 20326.74k 24636.42k 26074.67k
rmd160 1969.60k 3542.20k 8839.59k 14061.08k 16949.25k
rc4 32749.94k 41754.11k 42979.41k 43313.83k 43401.16k
des cbc 4783.53k 5096.96k 5133.99k 5144.48k 5331.65k
des ede3 1822.98k 1874.49k 1879.81k 1883.82k 1906.90k
idea cbc 0.00 0.00 0.00 0.00 0.00
rc2 cbc 5047.52k 5371.45k 5420.07k 5438.41k 5472.48k
rc5-32/12 cbc 14842.60k 18455.49k 19013.72k 19183.27k 19205.99k
blowfish cbc 11104.79k 13006.81k 13290.15k 13342.89k 13340.08k
cast cbc 6179.68k 6683.43k 6787.55k 6834.00k 6759.77k
sign verify sign/s verify/s
rsa 512 bits 0.2700s 1.4700s 3.7 0.7
Results (openssl-SNAP-20001102):
The 'numbers' are in 1000s of bytes per second processed.
type 8 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes
md2 346.13k 973.06k 1321.13k 1449.86k 1495.93k
mdc2 949.90k 1009.81k 1023.83k 1024.68k 1025.67k
md4 5708.71k 25226.48k 42385.41k 51141.34k 54359.38k
md5 4097.96k 19357.85k 34643.29k 43146.60k 46598.83k
hmac(md5) 1390.34k 8311.38k 21823.32k 36396.82k 45551.90k
sha1 2732.30k 12079.13k 20362.24k 24661.33k 26312.70k
rmd160 1966.65k 3557.65k 8871.17k 14067.11k 16976.55k
rc4 31286.56k 41229.33k 42952.28k 41191.42k 42795.01k
des cbc 4495.78k 5066.05k 5171.88k 5183.18k 5211.10k
des ede3 1762.63k 1866.05k 1884.25k 1883.14k 1889.62k
idea cbc 4405.44k 4584.83k 4649.13k 4609.39k 4663.14k
rc2 cbc 5046.57k 5406.55k 5460.99k 5428.91k 5469.53k
rc5-32/12 cbc 14966.02k 18505.39k 19106.30k 18936.02k 19226.62k
blowfish cbc 10507.83k 11938.39k 12391.09k 13102.76k 13361.15k
cast cbc 6909.95k 7297.09k 7405.74k 7406.59k 7307.04k
sign verify sign/s verify/s
rsa 512 bits 0.3100s 1.6900s 3.2 0.6
Same T1 with -engine:
The 'numbers' are in 1000s of bytes per second processed.
type 8 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes
md2 346.80k 968.65k 1317.57k 1448.85k 1485.67k
mdc2 925.21k 995.20k 1007.79k 1008.25k 1015.81k
md4 5540.11k 24874.39k 42041.94k 50910.55k 54111.04k
md5 4101.30k 19359.15k 34599.29k 42937.67k 46516.91k
hmac(md5) 1388.98k 8051.35k 21264.21k 36010.67k 45211.65k
sha1 2706.28k 12065.02k 20368.64k 24605.80k 26066.45k
rmd160 1968.56k 3544.76k 8851.63k 14041.43k 16971.09k
rc4 32748.35k 41706.79k 43050.49k 43235.31k 43439.45k
des cbc 4770.84k 5088.41k 5137.64k 5150.04k 5315.21k
des ede3 1821.79k 1874.03k 1881.43k 1880.53k 1908.74k
idea cbc 0.00 0.00 0.00 0.00 0.00
rc2 cbc 5045.14k 5400.58k 5450.84k 5476.17k 5453.14k
rc5-32/12 cbc 14689.88k 18451.37k 19050.24k 19165.24k 19197.77k
blowfish cbc 11129.59k 13018.81k 13306.88k 13338.71k 13267.72k
cast cbc 6155.39k 6651.16k 6776.66k 6804.33k 6730.13k
sign verify sign/s verify/s
rsa 512 bits 0.0052s 0.0005s 192.8 1861.3
rsa 1024 bits 0.0304s 0.0017s 32.9 571.6
rsa 2048 bits 0.2014s 0.0062s 5.0 160.7
rsa 4096 bits 1.4257s 0.0230s 0.7 43.4
sign verify sign/s verify/s
dsa 512 bits 0.0054s 0.0065s 186.5 153.8
dsa 1024 bits 0.0172s 0.0208s 58.0 48.0
dsa 2048 bits 0.0606s 0.0741s 16.5 13.5
DifferentT1 (without cswift karte):
The 'numbers' are in 1000s of bytes per second processed.
type 8 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes
md2 346.11k 971.88k 1319.85k 1447.25k 1488.21k
mdc2 940.10k 998.34k 1008.30k 1008.25k 1015.81k
md4 5477.31k 24775.34k 41990.31k 50962.43k 54061.70k
md5 4105.44k 19372.50k 34637.14k 43123.41k 46546.94k
hmac(md5) 1389.26k 8041.92k 21281.11k 36089.86k 45244.42k
sha1 2734.59k 12082.01k 20379.99k 24620.52k 26181.52k
rmd160 1946.30k 3536.94k 8844.63k 14049.28k 16965.63k
rc4 32768.27k 41700.37k 43024.13k 43250.26k 43431.25k
des cbc 4781.38k 5090.28k 5144.83k 5156.18k 5319.34k
des ede3 1822.34k 1871.94k 1881.77k 1879.84k 1908.74k
idea cbc 0.00 0.00 0.00 0.00 0.00
rc2 cbc 5056.10k 5397.38k 5459.71k 5461.45k 5474.25k
rc5-32/12 cbc 14840.87k 18426.88k 19048.79k 19162.16k 19221.16k
blowfish cbc 11055.00k 12999.77k 13313.19k 13369.00k 13374.81k
cast cbc 6535.17k 6703.21k 6803.54k 6812.17k 6752.94k
sign verify sign/s verify/s
rsa 512 bits 0.0051s 0.0005s 195.3 1881.6
rsa 1024 bits 0.0304s 0.0018s 32.9 570.6
rsa 2048 bits 0.2012s 0.0063s 5.0 159.9
rsa 4096 bits 1.4250s 0.0230s 0.7 43.4
sign verify sign/s verify/s
dsa 512 bits 0.0054s 0.0064s 186.4 155.8
dsa 1024 bits 0.0173s 0.0208s 57.9 48.0
dsa 2048 bits 0.0605s 0.0761s 16.5 13.1
I don't have the official rainbow patches. Requested them, but no
response up until now. Could anyone shed some ligt on this issue? I
can't believe that not a single algorithm shows better performance.
Regards,
Dirk
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]