hello, I am really impressed about this short response time . . . I had to test immediately. Here are the results:
AES with hardware support: [EMAIL PROTECTED]:~> time openssl speed -evp aes-128-cbc -engine ibmca engine "ibmca" set. ... The 'numbers' are in 1000s of bytes per second processed. type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-128-cbc 43737.21k 126067.54k 237307.31k 304215.72k 330134.87k AES without hardware support: [EMAIL PROTECTED]:~> time openssl speed -evp aes-128-cbc ... The 'numbers' are in 1000s of bytes per second processed. type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-128-cbc 22281.76k 24300.42k 25061.63k 25213.95k 25266.86k DES with hardware support: [EMAIL PROTECTED]:~> time openssl speed -evp des-cbc -engine ibmca engine "ibmca" set. ... The 'numbers' are in 1000s of bytes per second processed. type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes des-cbc 46207.55k 154391.40k 371894.95k 583389.53k 694714.37k DES without hardware support: [EMAIL PROTECTED]:~> time openssl speed -evp des-cbc ... The 'numbers' are in 1000s of bytes per second processed. type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes des-cbc 17966.35k 20047.34k 20651.61k 20805.97k 20851.37k This shows that there is really an effect using the engine and the influence gets clear with reasonable blocksizes. (According my original tests, I have expected the response that "des" and "aes" switches use the low level ciphers directly and these always use the builtin software versions. At least I can redirect with EVP to ENGINE.) I will check the description, documentation and man page tomorrow. Thanks. Kind regards, Manfred Gnirss, TMCC Technical Sales Support, eMail: [EMAIL PROTECTED] ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [email protected] Automated List Manager [EMAIL PROTECTED]
