> Is AES performance expected to be much lower when using the FIPS 2.0 > Object Module?
Which CPU? You said it's non-AES-NI-capable, but is it SSSE3-capable? If yes, then see "related note" at http://www.mail-archive.com/[email protected]/msg29827.html. > Below are the speed results when using AES-128-CBC with > and w/o the FIPS module. The host system is 32-bit Linux using gcc > 4.4.3. The host system does not have AES-NI support. No additional > config arguments were used other than 'fipscanisteronly' for building > the FIPS module and 'fips' for building 1.0.1b. > > $ ./openssl speed -evp aes-128-cbc > OpenSSL 1.0.1b-fips 26 Apr 2012 > type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 > bytes > aes-128-cbc 73739.96k 90031.86k 92865.76k 95791.08k > 95761.47k > > $ ./openssl speed -evp aes-128-cbc > OpenSSL 1.0.1b 26 Apr 2012 > compiler: gcc ... -DVPAES_ASM ... > type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 > bytes > aes-128-cbc 195185.75k 242239.91k 245629.15k 243471.00k > 250167.68k Ratio suggests that it's Nehalem core... ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [email protected] Automated List Manager [email protected]
