On Wed, Nov 06, 2013, sarav.sars wrote: > Is it necessary to load aesni-intel module like 'modprobe aesni-intel' ? > Loading this module makes no difference in openssl speed output. > > openssl speed -elapsed -evp aes-128-cbc > > before loading aesni-intel module > > type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 > bytes > aes-128-cbc 561737.40k 598685.65k 610372.15k 610802.35k > 611521.88k > > after loading aesni-intel module > > type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 > bytes > aes-128-cbc 563835.61k 598692.84k 608343.64k 610805.42k > 611524.61k >
Which version of OpenSSL are you using? The latest (1.0.1) includes direct AES-NI support in the software algorithm implementation and not via ENGINE. You can shut off AES-NI support via the environment variable OPENSSL_ia32cap: for example: OPENSSL_ia32cap=~0x200000200000000 openssl speed -evp aes-128-cbc Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
