hi,

i'll definetly have a look at the old posts if i find them. :-)

thank you very much for this mail. it has really helped me understanding
a bit more of what i was doing. now, results really make sense.

hardware disabled
=================
openssl speed -elapsed

                  sign    verify    sign/s verify/s
rsa  512 bits   0.0015s   0.0002s    676.4   6309.0
rsa 1024 bits   0.0089s   0.0004s    111.7   2255.0
rsa 2048 bits   0.0518s   0.0015s     19.3    676.0
rsa 4096 bits   0.3418s   0.0052s      2.9    192.2


hardware enabled
================
openssl speed -elapsed -engine chil

                  sign    verify    sign/s verify/s
rsa  512 bits   0.0042s   0.0024s    239.5    415.3
rsa 1024 bits   0.0121s   0.0035s     82.5    282.5
rsa 2048 bits   0.0597s   0.0073s     16.8    136.1
rsa 4096 bits   0.3917s   0.0215s      2.6     46.6


with hardware enabled now i get 82.5 signs which i guess, as you said,
is using just one processor from the nShield (which has two). so if it
used the two processors it would do 165 signs more or less (nShiled is
supposed to do 150 operations for second).

as you can see, hardware is slower. my box is an Intel P4 at 1,4 GHz and
is a bit faster than the processors in the nShiled (i think the model
i'm trying is one of the worstest). i've tried the hardware version of
my program with a multiprocess and i've gain more performace (uses two
processors).

but, what if i use a dual pentium box with P4 at 2GHz or a fastest
machine? this will be faster and cheaper than the cryptographic
hardware. eventhough, the cryptographic hardware has more fetures than
just do operations (at least the nShield), which may be is the good
thing.

anyway, everything makes more sense now. thank you very much.

best regards,

aleix



______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to