Hello,
at first, thanks for the hint that using "-evp" can give me the performance
information about the specified engine. This helps already a lot.
But,
in the meantime I have checked for information about the openssl speed in
combination with the "-engine" option.
Neither the "man" pages for openssl, nor the openssl speed command itself
[EMAIL PROTECTED]:~> time openssl speed xxx
Error: bad option or value
Available values:
md2 mdc2 md4 md5 hmac sha1 rmd160
rc2-cbc bf-cbc
des-cbc des-ede3 aes-128-cbc aes-192-cbc aes-256-cbc rc4
rsa512 rsa1024 rsa2048 rsa4096
dsa512 dsa1024 dsa2048
rc2 des aes rsa blowfish
Available options:
-elapsed measure time in real time instead of CPU user time.
-engine e use engine e, possibly a hardware device.
-evp e use EVP e.
-decrypt time decryption instead of encryption (only EVP).
-mr produce machine readable output.
-multi n run n benchmarks in parallel.
gives me an indication, that specifying the "-engine" is ignore for some
encryption algorithms.
In addition, the documentation on www.openssl.org does not help too much
for this question:
http://www.openssl.org/docs/apps/speed.html#
...
SYNOPSIS
openssl speed [-engine id] [md2] [mdc2] [md5] [hmac] [sha1] [rmd160]
[idea-cbc] [rc2-cbc] [rc5-cbc] [bf-cbc] [des-cbc] [des-ede3] [rc4] [rsa512]
[rsa1024] [rsa2048] [rsa4096] [dsa512] [dsa1024] [dsa2048] [idea] [rc2]
[des] [rsa] [blowfish]
...
-engine id
specifying an engine (by it's unique id string) will cause speed
to attempt to obtain a functional reference to the specified engine,
thus initialising it if needed. The engine will then be set as the
default for all available algorithms.
(Please note, here is the "-evp" not mentioned.)
In opposite, after reading this documentation I think, I have to assume
that the correct behavior is to use the engine if -engine is specified
(especially as I get a "engine set" message, and for "openssl speed -engine
ibmca" some of the results are executed with the builtin software and some
other with the engine, and you do not get an indication which of them ).
Therefore I assume, that there is an error. I would appreciate if
a) either, the documentation would reflect the behavior of the code,
b) or, the speed would use the engine if requested. (This would be
solution, which I prefer).
Is there any chance for improvement? Thanks.
Kind regards,
Manfred Gnirss,
TMCC Technical Sales Support,
eMail: [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List openssl-dev@openssl.org
Automated List Manager [EMAIL PROTECTED]
