Menu
▾
▴
Re: [Devil-Linux-discuss] VIA C3/C7 PadLock hardware crypto
|
From: Dmitry K. <dm...@dz...> - 2007-11-01 13:58:21
|
Hello Serge,
My eBay ordered boards are still in transit, but I have similar MaxTerm 8500
device for tests, the only reasonable difference - it has 1 GHz VIA C3 CPU,
not that 800 MHz ones that I was talking about.
So here is the OpenSSL speed test, please note - VIA padlock and padlock-aes
modules were enabled in kernel configuration and compiled. I have tried the
tests several times WITH and WITHOUT those modules loaded. In both cases
results are same, that means that OpenSSL patches are still required to
utilize the hardware AES crypto.
Some dmesg output:
================================================
[ 0.000000] Detected 1002.311 MHz processor.
[ 26.631989] Initializing CPU#0
[ 26.711152] Memory: 483528k/491456k available (2108k kernel code, 7316k
reserved, 512k data, 184k init, 0k highmem)
[ 26.851970] Calibrating delay using timer specific routine.. 2006.53
BogoMIPS (lpj=10032652)
[ 26.852305] CPU: L1 I Cache: 64K (32 bytes/line), D cache 64K (32
bytes/line)
[ 26.852314] CPU: L2 Cache: 64K (32 bytes/line)
[ 26.852367] CPU: Centaur VIA Nehemiah stepping 08
OpenSSL speed tests:
================================================
The 'numbers' are in 1000s of bytes per second processed.
type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes
md2 427.26k 909.08k 1264.95k 1403.32k 1450.61k
mdc2 1081.53k 1224.33k 1261.57k 1277.11k 1281.87k
md4 3817.89k 13035.86k 36549.49k 66307.23k 87466.61k
md5 3446.69k 12104.06k 35402.50k 67964.00k 93546.65k
hmac(md5) 4552.84k 15122.12k 41422.93k 73146.26k 94700.61k
sha1 3146.50k 9652.37k 22729.31k 34346.18k 40459.23k
rmd160 2735.65k 7883.50k 17057.85k 24027.60k 27352.03k
rc4 35043.58k 39253.07k 40256.13k 40701.11k 40834.81k
des cbc 10115.70k 10590.26k 10729.89k 10764.93k 10777.51k
des ede3 3627.33k 3690.21k 3707.92k 3712.60k 3714.98k
idea cbc 6594.41k 6895.35k 6977.91k 6998.92k 7005.38k
rc2 cbc 4136.49k 4306.41k 4363.69k 4362.38k 4368.16k
rc5-32/12 cbc 32464.64k 36130.49k 37608.95k 37989.04k 38113.21k
blowfish cbc 19194.56k 20598.27k 20857.79k 20971.25k 21013.43k
cast cbc 9159.76k 9673.53k 9830.74k 9872.58k 9884.83k
aes-128 cbc 11937.15k 14327.41k 15190.16k 15424.30k 15494.04k
aes-192 cbc 10543.73k 12292.98k 12915.50k 13081.69k 13131.69k
aes-256 cbc 9359.60k 10550.16k 11006.55k 11127.92k 11201.19k
camellia-128 cbc 0.00 0.00 0.00 0.00
0.00
camellia-192 cbc 0.00 0.00 0.00 0.00
0.00
camellia-256 cbc 0.00 0.00 0.00 0.00
0.00
sha256 2078.33k 4901.00k 8810.48k 11019.06k 11885.20k
sha512 204.22k 817.01k 1146.73k 1556.75k 1739.10k
sign verify sign/s verify/s
rsa 512 bits 0.003140s 0.000246s 318.5 4063.7
rsa 1024 bits 0.014362s 0.000686s 69.6 1456.7
rsa 2048 bits 0.081129s 0.002224s 12.3 449.6
rsa 4096 bits 0.524500s 0.007863s 1.9 127.2
sign verify sign/s verify/s
dsa 512 bits 0.002332s 0.002795s 428.9 357.8
dsa 1024 bits 0.006523s 0.007810s 153.3 128.0
dsa 2048 bits 0.021410s 0.025522s 46.7 39.2
On Tuesday 30 October 2007 20:00:04 Serge Leschinsky wrote:
> Dmitry Komarov wrote:
> > On Tuesday 30 October 2007 15:06:52 Heiko Zuerker wrote:
> >> Hey,
> >>
> >> On Tue, October 30, 2007 07:56, Dmitry Komarov wrote:
> >>> has anyone tried to compile DL with in-kernel VIA C3/C7 hardware crypto
> >>> engine support (VIA PadLock) and other required C3/C7 patches for
> >>> VPN/SSL acceleration?
> >>>
> >>> Any success stories or suggestions?
> >>
> >> Is this standard part of the 2.4 or 2.6 series, or does it require
> >> additional patches?
> >
> > VIA C3 support was included starting from 2.6.11 kernels, and VIA C7
> > SHA1/SHA256 support was added from 2.6.19.
> >
> > But it may require some patches to OpenSSL libs and some other
> > applications though. Here is the link to VIA PadLock support for Linux
> > page:
> >
> > http://www.logix.cz/michal/devel/padlock/
>
> I think we can add that code as a patch (may be only optional, it depends
> on the real advantages of this patch).
>
> > The main idea behind my question is that you can find a lot unexpensive
> > VIA Mini-ITX based boards and systems which are just a perfect platform
> > for Devil Linux distro, especially if it would have built-in support for
> > their harware crypto engines.
>
> Have you got any hardware of this type? I'd like to ask you about small
> testing of crypto possibilities of the board. Please do the following and
> share the results with us:
>
> # openssl
> OpenSSL> speed
>
> After we add the patch I'll ask you to repeat the test and everybody will
> be able to check speed up of crypto. Is it ok?
>
> It's from my system, CPU: Intel(R) Pentium(R) 4 CPU 2.40GHz stepping 01
>
> type 16 bytes 64 bytes 256 bytes 1024 bytes 8192
> bytes md2 1083.86k 2286.95k 3166.46k 3495.30k
> 3618.13k mdc2 0.00 0.00 0.00 0.00
> 0.00 md4 13056.59k 46606.95k 147900.22k
> 342027.30k 544493.12k md5 11080.59k 39827.41k
> 128398.51k 284474.03k 434088.62k hmac(md5) 17638.54k
> 63578.20k 181733.97k 339369.98k 453118.63k sha1 11778.76k
> 39273.37k 106729.05k 189599.21k 247474.86k rmd160
> 10247.03k 32590.93k 78762.58k 124134.40k 149230.93k rc4
> 184205.26k 260034.69k 279309.65k 286295.04k 288505.86k des cbc
> 49821.31k 51994.90k 52212.43k 52670.81k 52568.06k des
> ede3 18528.82k 18745.07k 18887.34k 18931.71k 18890.75k
> idea cbc 26481.13k 29136.73k 29953.19k 30030.17k
> 29878.95k rc2 cbc 20763.43k 22201.94k 22351.27k 22460.53k
> 22382.39k rc5-32/12 cbc 0.00 0.00 0.00
> 0.00 0.00 blowfish cbc 81991.24k 87533.23k 88552.62k
> 89282.22k 89118.04k cast cbc 45847.92k 54174.72k 56665.86k
> 57541.63k 57308.50k aes-128 cbc 64413.49k 88553.49k
> 99803.73k 103181.65k 102530.64k aes-192 cbc 38816.20k 65566.70k
> 81428.99k 86528.34k 87053.65k aes-256 cbc 36123.11k
> 59030.44k 71636.91k 75593.39k 75780.08k camellia-128 cbc
> 0.00 0.00 0.00 0.00 0.00 camellia-192 cbc
> 0.00 0.00 0.00 0.00 0.00 camellia-256
> cbc 0.00 0.00 0.00 0.00 0.00 sha256
> 7236.61k 16962.65k 30844.07k 39323.65k 42707.63k
> sha512 4643.79k 18706.35k 32713.73k 48179.54k
> 56016.90k sign verify sign/s verify/s
> rsa 512 bits 0.000905s 0.000070s 1105.2 14378.3
> rsa 1024 bits 0.004064s 0.000182s 246.1 5484.1
> rsa 2048 bits 0.022000s 0.000544s 45.5 1838.6
> rsa 4096 bits 0.131711s 0.002079s 7.6 480.9
> sign verify sign/s verify/s
> dsa 512 bits 0.000661s 0.000787s 1513.3 1270.5
> dsa 1024 bits 0.001750s 0.002148s 571.3 465.5
> dsa 2048 bits 0.005299s 0.006536s 188.7 153.0
|
