Menu
▾
▴
Re: [Devil-Linux-discuss] VIA C3/C7 PadLock hardware crypto
|
From: Dmitry K. <dm...@dz...> - 2007-11-01 17:07:59
|
Hi, so that really confirms the fact we need this OpenSSL patchset, as you can see from my previous message, similar C7 board gives 10 times higher performance with Gentoo and OpenSSL padlock patches applied... On Thursday 01 November 2007 18:36:55 Philippe Marzouk wrote: > On Thu, Nov 01, 2007 at 02:30:22PM +0200, Dmitry Komarov wrote: > > Hello, > > > > Is it a VIA C3 or C7 CPU? And at which ferquency? > > This is a C7 1.2Ghz > > > You said that you compiled your kernel with VIA support, but did you > > enable Hardware Crypto option in the kernel with appropriate chipset > > selection? Did you load those padlock crypto modules before testing > > openssl speed? > > They are available as modules: > > CONFIG_CRYPTO_DEV_PADLOCK=m > CONFIG_CRYPTO_DEV_PADLOCK_AES=m > CONFIG_CRYPTO_DEV_PADLOCK_SHA=m > > However they were not loaded (duh!) > > dmesg gives: > padlock: Using VIA PadLock ACE for AES algorithm. > padlock: Using VIA PadLock ACE for SHA1/SHA256 algorithms. > padlock: 3 drivers are available. > > I rerun with -engine padlock > > Here are the results: > > type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 > bytes md2 448.75k 956.13k 1323.52k 1465.69k > 1514.70k mdc2 0.00 0.00 0.00 0.00 > 0.00 md4 4282.78k 14819.72k 41912.49k > 77754.03k 103565.57k md5 3959.09k 13873.69k 40602.79k > 78527.44k 107205.61k hmac(md5) 5490.57k 18332.86k > 49374.12k 85938.94k 109242.24k sha1 3519.95k 10891.07k > 25894.19k 39226.00k 46636.48k rmd160 3082.02k > 8920.64k 19502.49k 27558.57k 31507.69k rc4 40262.22k > 45080.70k 46477.19k 46987.46k 46951.08k des cbc > 12101.70k 12627.39k 12721.15k 12756.70k 12763.14k des ede3 > 4266.98k 4347.14k 4341.67k 4342.17k 4361.76k idea cbc > 7960.33k 8435.11k 8569.66k 8570.67k 8585.22k rc2 cbc > 4671.14k 4805.63k 4846.34k 4858.85k 4860.59k > rc5-32/12 cbc 0.00 0.00 0.00 0.00 > 0.00 blowfish cbc 21997.17k 23662.88k 23998.63k 24124.13k > 24160.94k cast cbc 11005.77k 11734.43k 11903.83k 11972.21k > 11990.36k aes-128 cbc 14383.44k 16745.86k 17592.85k > 17700.13k 17879.93k aes-192 cbc 12539.86k 14336.00k 14902.53k > 15099.00k 15076.01k aes-256 cbc 11135.32k 12442.28k > 12781.63k 12979.29k 12997.61k camellia-128 cbc 0.00 > 0.00 0.00 0.00 0.00 camellia-192 cbc 0.00 > 0.00 0.00 0.00 0.00 camellia-256 cbc > 0.00 0.00 0.00 0.00 0.00 sha256 > 2103.55k 5018.65k 9140.31k 11461.97k 12395.21k sha512 > 1468.30k 5881.13k 11065.86k 17101.14k 20367.29k sign > verify sign/s verify/s > rsa 512 bits 0.002456s 0.000181s 407.2 5516.4 > rsa 1024 bits 0.010418s 0.000461s 96.0 2171.3 > rsa 2048 bits 0.053763s 0.001345s 18.6 743.7 > rsa 4096 bits 0.318437s 0.004390s 3.1 227.8 > sign verify sign/s verify/s > dsa 512 bits 0.001709s 0.002074s 585.3 482.1 > dsa 1024 bits 0.004340s 0.005220s 230.4 191.6 > dsa 2048 bits 0.013038s 0.015497s 76.7 64.5 > > It doesn't seem that much different :-| > > Philippe > > > On Wednesday 31 October 2007 08:10:13 Philippe Marzouk wrote: > > > Hi, > > > > > > I haven a Via EN12000 with DL 1.3.4 I compiled at the end of july with > > > 2.6.21.5 kernel compiled for the VIA CPU. > > > > > > I get around 4MB/s of VPN throughput using ipsec-tools which is OK for > > > me as my DSL uplink is only around 1Mb/s and I use it with a WiFi > > > linksys router which does not go much faster than 2-3MB/s. > > > > > > Here is the output of openssl (not patched) speed on this system: > > > > > > OpenSSL 0.9.8e 23 Feb 2007 > > > built on: Sat Jul 28 19:14:16 Local time zone must be set--see zic > > > manual page 2007 options:bn(64,32) md2(int) rc4(idx,int) > > > des(ptr,risc1,16,long) aes(partial) idea(int) blowfish(idx) compiler: > > > gcc -fPIC -DOPENSSL_PIC -DZLIB_SHARED -DZLIB -DOPENSSL_THREADS > > > -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTERMIO -O3 > > > -fomit-frame-pointer -Wall -DOPENSSL_BN_ASM_PART_WORDS > > > -DOPENSSL_IA32_SSE2 -DSHA1_ASM -DMD5_ASM -DRMD160_ASM -DAES_ASM > > > available timing options: TIMES TIMEB HZ=100 [sysconf value] > > > timing function used: times > > > The 'numbers' are in 1000s of bytes per second processed. > > > type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 > > > bytes md2 445.58k 948.54k 1321.30k 1464.32k > > > 1517.44k mdc2 0.00 0.00 0.00 > > > 0.00 0.00 md4 4280.63k 14773.95k 42052.07k > > > 77736.62k 103557.33k md5 3946.47k 13920.19k > > > 40439.58k 78488.40k 107598.35k hmac(md5) 5471.18k > > > 18343.91k 49535.49k 85630.29k 109242.24k sha1 > > > 3514.75k 10887.00k 25903.43k 39475.71k 46310.83k rmd160 > > > 3080.74k 8926.14k 19499.32k 27568.13k 31437.49k rc4 > > > 40253.31k 45109.93k 46369.11k 46791.68k 46952.81k des > > > cbc > > > 12141.82k 12626.84k 12675.15k 12774.66k 12769.07k des ede3 > > > 4262.84k 4348.23k 4346.88k 4352.00k 4359.90k idea > > > cbc 7974.25k 8436.37k 8567.78k 8565.42k 8585.11k rc2 > > > cbc 4655.45k 4821.64k 4845.40k 4854.78k 4862.97k > > > rc5-32/12 cbc 0.00 0.00 0.00 0.00 0.00 > > > blowfish cbc 22059.53k 23586.54k 24061.43k 24029.64k > > > 24228.46k cast cbc 11002.71k 11694.29k 11943.30k > > > 11968.51k 11953.74k aes-128 cbc 14373.09k 16753.07k > > > 17594.91k 17753.43k 17818.97k aes-192 cbc 12547.46k > > > 14325.70k 14905.43k 15092.87k 15097.47k aes-256 cbc > > > 9892.17k 11976.45k 12751.03k 12893.87k 12966.53k camellia-128 > > > cbc 0.00 0.00 0.00 0.00 0.00 > > > camellia-192 cbc 0.00 0.00 0.00 0.00 > > > 0.00 camellia-256 cbc 0.00 0.00 0.00 0.00 > > > 0.00 sha256 2111.48k 5018.54k 9106.26k 11497.57k > > > 12397.96k sha512 1468.83k 5865.51k 11094.47k 17036.84k > > > 20446.90k sign verify sign/s verify/s > > > rsa 512 bits 0.002456s 0.000180s 407.2 5546.3 > > > rsa 1024 bits 0.010418s 0.000459s 96.0 2177.4 > > > rsa 2048 bits 0.053710s 0.001352s 18.6 739.7 > > > rsa 4096 bits 0.318437s 0.004379s 3.1 228.4 > > > sign verify sign/s verify/s > > > dsa 512 bits 0.001708s 0.002093s 585.5 477.9 > > > dsa 1024 bits 0.004340s 0.005343s 230.4 187.2 > > > dsa 2048 bits 0.013025s 0.015876s 76.8 63.0 > > > > > > I should try to patch when I get some time to compare the results. > > > > > > Philippe > > > > > > ----------------------------------------------------------------------- > > >-- This SF.net email is sponsored by: Splunk Inc. > > > Still grepping through log files to find problems? Stop. > > > Now Search log events and configuration files using AJAX and a browser. > > > Download your FREE copy of Splunk now >> http://get.splunk.com/ > > > _______________________________________________ > > > Devil-linux-discuss mailing list > > > Dev...@li... > > > https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss > > > > ------------------------------------------------------------------------- > > This SF.net email is sponsored by: Splunk Inc. > > Still grepping through log files to find problems? Stop. > > Now Search log events and configuration files using AJAX and a browser. > > Download your FREE copy of Splunk now >> http://get.splunk.com/ > > _______________________________________________ > > Devil-linux-discuss mailing list > > Dev...@li... > > https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss > > ------------------------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. > Still grepping through log files to find problems? Stop. > Now Search log events and configuration files using AJAX and a browser. > Download your FREE copy of Splunk now >> http://get.splunk.com/ > _______________________________________________ > Devil-linux-discuss mailing list > Dev...@li... > https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss |
