Re: [Devil-Linux-discuss] VIA C3/C7 PadLock hardware crypto

[Serge L. <fi...@in...>]

Dmitry Komarov wrote:
> On Tuesday 30 October 2007 15:06:52 Heiko Zuerker wrote:
>> Hey,
>>
>> On Tue, October 30, 2007 07:56, Dmitry Komarov wrote:
>>> has anyone tried to compile DL with in-kernel VIA C3/C7 hardware crypto
>>> engine support (VIA PadLock) and other required C3/C7 patches for VPN/SSL
>>> acceleration?
>>>
>>> Any success stories or suggestions?
>> Is this standard part of the 2.4 or 2.6 series, or does it require
>> additional patches?
> 
> VIA C3 support was included starting from 2.6.11 kernels, and VIA C7 
> SHA1/SHA256 support was added from 2.6.19. 
> 
> But it may require some patches to OpenSSL libs and some other applications 
> though. Here is the link to VIA PadLock support for Linux page:
> 
> http://www.logix.cz/michal/devel/padlock/
I think we can add that code as a patch (may be only optional, it depends on the
real advantages of this patch).

> 
> The main idea behind my question is that you can find a lot unexpensive VIA 
> Mini-ITX based boards and systems which are just a perfect platform for Devil 
> Linux distro, especially if it would have built-in support for their harware 
> crypto engines.
Have you got any hardware of this type? I'd like to ask you about small testing
of crypto possibilities of the board. Please do the following and share the
results with us:

# openssl
OpenSSL> speed

After we add the patch I'll ask you to repeat the test and everybody will be
able to check speed up of crypto. Is it ok?

It's from my system, CPU: Intel(R) Pentium(R) 4 CPU 2.40GHz stepping 01

type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
md2               1083.86k     2286.95k     3166.46k     3495.30k     3618.13k
mdc2                 0.00         0.00         0.00         0.00         0.00
md4              13056.59k    46606.95k   147900.22k   342027.30k   544493.12k
md5              11080.59k    39827.41k   128398.51k   284474.03k   434088.62k
hmac(md5)        17638.54k    63578.20k   181733.97k   339369.98k   453118.63k
sha1             11778.76k    39273.37k   106729.05k   189599.21k   247474.86k
rmd160           10247.03k    32590.93k    78762.58k   124134.40k   149230.93k
rc4             184205.26k   260034.69k   279309.65k   286295.04k   288505.86k
des cbc          49821.31k    51994.90k    52212.43k    52670.81k    52568.06k
des ede3         18528.82k    18745.07k    18887.34k    18931.71k    18890.75k
idea cbc         26481.13k    29136.73k    29953.19k    30030.17k    29878.95k
rc2 cbc          20763.43k    22201.94k    22351.27k    22460.53k    22382.39k
rc5-32/12 cbc        0.00         0.00         0.00         0.00         0.00
blowfish cbc     81991.24k    87533.23k    88552.62k    89282.22k    89118.04k
cast cbc         45847.92k    54174.72k    56665.86k    57541.63k    57308.50k
aes-128 cbc      64413.49k    88553.49k    99803.73k   103181.65k   102530.64k
aes-192 cbc      38816.20k    65566.70k    81428.99k    86528.34k    87053.65k
aes-256 cbc      36123.11k    59030.44k    71636.91k    75593.39k    75780.08k
camellia-128 cbc        0.00         0.00         0.00         0.00         0.00
camellia-192 cbc        0.00         0.00         0.00         0.00         0.00
camellia-256 cbc        0.00         0.00         0.00         0.00         0.00
sha256            7236.61k    16962.65k    30844.07k    39323.65k    42707.63k
sha512            4643.79k    18706.35k    32713.73k    48179.54k    56016.90k
                  sign    verify    sign/s verify/s
rsa  512 bits 0.000905s 0.000070s   1105.2  14378.3
rsa 1024 bits 0.004064s 0.000182s    246.1   5484.1
rsa 2048 bits 0.022000s 0.000544s     45.5   1838.6
rsa 4096 bits 0.131711s 0.002079s      7.6    480.9
                  sign    verify    sign/s verify/s
dsa  512 bits 0.000661s 0.000787s   1513.3   1270.5
dsa 1024 bits 0.001750s 0.002148s    571.3    465.5
dsa 2048 bits 0.005299s 0.006536s    188.7    153.0

-- 
Sincerely,
Serge Leschinsky