But even if it isn't enabled in the BIOS, shouldn't the output be something like this when you probe it (even if it isn't available or enabled in BIOS, but openssl itself supports it)?
$ openssl engine (aesni) Intel AES-NI engine (no-aesni) (dynamic) Dynamic engine loading support (I haven't been able to find the option in the BIOS, so I'm going to have to send a support request to ASUS about that or maybe try and see if I can find another tool to see whether it's there; and whether or not it's active or not - again, different questions for different points). On Thu, Mar 14, 2013 at 11:28 AM, Matthew Hall <mh...@mhcomputing.net> wrote: > In many cases you have to explicitly enable it in the BIOS first before it > will work right. > -- > Sent from my mobile device. > > Ewen Chan <chan.e...@gmail.com> wrote: > >>So this is a partial continuation from the discussion thread that I >>started yesterday in regards to using AES-CBC. >> >>I've got an Intel Core i7 3930K that supports AES-NI and I spent the >>greater part of last night trying to get openssl to work or at least >>recognize it, but it doesn't seem to want to do that. >> >>I've tried with Cygwin 1.5-something (I forget) and the latest cygwin >>(tried upgrading just the openssl package - didn't work; so I ended up >>uninstalling my old cygwin; installing the new and it still didn't >>work.) >> >>I've also tried Ubuntu 12.04 LTS and Ubuntu 12.10 (and it said that it >>downloaded the update to it and applied it, but it still didn't work >>for either). I've even tried redownloading the source from >>www.openssl.org/source (taking it up to 1.0.1e) and that also still >>didn't work. >> >>(i.e. "didn't work" means that when I type "openssl engine" - the >>aesni doesn't show up as an option). >> >>I then tried to modify the initramfs config file to add aes_ni and >>then running and update-initramfs; and that didn't work either. >> >>All of the probing that I tried to do showed that the AES-NI kernel >>module wasn't loaded (but - for example in Solaris 11 that I've got >>running in a VM; when I type "openssl engine"; it will show (aesni) >>AES-NI engine (no aesni)); which leads me to think that on the Linux >>side, something similiar should happen (that openssl aesni engine >>should still be available but then there'd be a comment if the AES-NI >>kernel module wasn't loaded). >> >>And now I am trying to install Solaris 11 on the host system itself >>and it's having it's own set of issues (hardware compatibility; which >>I might have to set up a PXE boot server so that I can patch in/update >>drivers for the Solaris 11 install - but that's a different story for >>some other list). >> >>And I also tried SuSE Linux Enterprise Server 11 SP1 (I think) - same >>thing. >> >>cat /proc/cpuinfo shows that aes is available. >>cat /proc/crypto does not. >> >>And people (via more googling) have said that they can load kernel >>modules post-boot, but I don't know how to do that either. >> >>Any help on any recommended OS would be greatly appreciated. (It >>doesn't matter so much to me which OS is used so long as the openssl >>using the aesni engine works.) Thanks. >>______________________________________________________________________ >>OpenSSL Project http://www.openssl.org >>User Support Mailing List openssl-users@openssl.org >>Automated List Manager majord...@openssl.org > ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
