Re: AES performance when using FIPS 2.0 Object Module

2012-05-13 Thread Dr. Stephen Henson
On Fri, May 11, 2012, John Foley wrote: > Thanks for the information, that explains it. The vpaes-x86 module > isn't included in the FIPS module. > In the unlreleased OpenSSL 1.0.2 I've just committed a change that no longer redirects all cipher and digests operations to the FIPS module outsid

Re: AES performance when using FIPS 2.0 Object Module

2012-05-11 Thread John Foley
Thanks for the information, that explains it. The vpaes-x86 module isn't included in the FIPS module. The CPU information is: model name: Intel(R) Core(TM) i7 CPU Q 720 @ 1.60GHz On 05/11/2012 09:07 AM, Andy Polyakov wrote: >> Is AES performance expected to be much lower when usi

Re: AES performance when using FIPS 2.0 Object Module

2012-05-11 Thread Andy Polyakov
> Is AES performance expected to be much lower when using the FIPS 2.0 > Object Module? Which CPU? You said it's non-AES-NI-capable, but is it SSSE3-capable? If yes, then see "related note" at http://www.mail-archive.com/openssl-dev@openssl.org/msg29827.html. > Below are the speed results when us

AES performance when using FIPS 2.0 Object Module

2012-05-11 Thread John Foley
Is AES performance expected to be much lower when using the FIPS 2.0 Object Module? Below are the speed results when using AES-128-CBC with and w/o the FIPS module. The host system is 32-bit Linux using gcc 4.4.3. The host system does not have AES-NI support. No additional config arguments were