Menu
▾
▴
Re: [Devil-Linux-discuss] VIA C3/C7 PadLock hardware crypto
|
From: Dmitry K. <dm...@dz...> - 2007-11-01 17:50:49
|
Philippe, what was the exact command line for your test? I did some tests on the cheap MaxTerm 8500 device where I have remote access (VIA C3 1GHz, 512 RAM), it runs ImediaLinux distribution. Results are just terrific for such unexpensive device, wish I have this with Devil: [root@crypto]# openssl speed -evp aes-128-cbc -engine padlock engine "padlock" set. type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-128-cbc 35042.17k 124617.57k 331076.12k 560053.16k 701632.55k [root@crypto]# openssl speed -evp aes-192-cbc -engine padlock engine "padlock" set. type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-192-cbc 35613.74k 121805.44k 307919.11k 492034.72k 597090.66k [root@crypto]# openssl speed -evp aes-256-cbc -engine padlock engine "padlock" set. type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-256-cbc 35539.32k 118421.56k 271725.80k 430060.27k 517467.68k Compare to the same board but without padlock support: type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-128-cbc 10915.99k 13937.99k 15080.02k 15395.04k 15491.32k aes-192-cbc 9679.55k 11995.28k 12832.40k 13059.91k 13126.25k aes-256-cbc 8705.40k 10333.62k 10947.27k 11106.15k 11161.26k On Thursday 01 November 2007 18:36:55 Philippe Marzouk wrote: > On Thu, Nov 01, 2007 at 02:30:22PM +0200, Dmitry Komarov wrote: > > Hello, > > > > Is it a VIA C3 or C7 CPU? And at which ferquency? > > This is a C7 1.2Ghz > > > You said that you compiled your kernel with VIA support, but did you > > enable Hardware Crypto option in the kernel with appropriate chipset > > selection? Did you load those padlock crypto modules before testing > > openssl speed? > > They are available as modules: > > CONFIG_CRYPTO_DEV_PADLOCK=m > CONFIG_CRYPTO_DEV_PADLOCK_AES=m > CONFIG_CRYPTO_DEV_PADLOCK_SHA=m > > However they were not loaded (duh!) > > dmesg gives: > padlock: Using VIA PadLock ACE for AES algorithm. > padlock: Using VIA PadLock ACE for SHA1/SHA256 algorithms. > padlock: 3 drivers are available. > > I rerun with -engine padlock > > Here are the results: > > type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 > bytes md2 448.75k 956.13k 1323.52k 1465.69k > 1514.70k mdc2 0.00 0.00 0.00 0.00 > 0.00 md4 4282.78k 14819.72k 41912.49k > 77754.03k 103565.57k md5 3959.09k 13873.69k 40602.79k > 78527.44k 107205.61k hmac(md5) 5490.57k 18332.86k > 49374.12k 85938.94k 109242.24k sha1 3519.95k 10891.07k > 25894.19k 39226.00k 46636.48k rmd160 3082.02k > 8920.64k 19502.49k 27558.57k 31507.69k rc4 40262.22k > 45080.70k 46477.19k 46987.46k 46951.08k des cbc > 12101.70k 12627.39k 12721.15k 12756.70k 12763.14k des ede3 > 4266.98k 4347.14k 4341.67k 4342.17k 4361.76k idea cbc > 7960.33k 8435.11k 8569.66k 8570.67k 8585.22k rc2 cbc > 4671.14k 4805.63k 4846.34k 4858.85k 4860.59k > rc5-32/12 cbc 0.00 0.00 0.00 0.00 > 0.00 blowfish cbc 21997.17k 23662.88k 23998.63k 24124.13k > 24160.94k cast cbc 11005.77k 11734.43k 11903.83k 11972.21k > 11990.36k aes-128 cbc 14383.44k 16745.86k 17592.85k > 17700.13k 17879.93k aes-192 cbc 12539.86k 14336.00k 14902.53k > 15099.00k 15076.01k aes-256 cbc 11135.32k 12442.28k > 12781.63k 12979.29k 12997.61k camellia-128 cbc 0.00 > 0.00 0.00 0.00 0.00 camellia-192 cbc 0.00 > 0.00 0.00 0.00 0.00 camellia-256 cbc > 0.00 0.00 0.00 0.00 0.00 sha256 > 2103.55k 5018.65k 9140.31k 11461.97k 12395.21k sha512 > 1468.30k 5881.13k 11065.86k 17101.14k 20367.29k sign > verify sign/s verify/s > rsa 512 bits 0.002456s 0.000181s 407.2 5516.4 > rsa 1024 bits 0.010418s 0.000461s 96.0 2171.3 > rsa 2048 bits 0.053763s 0.001345s 18.6 743.7 > rsa 4096 bits 0.318437s 0.004390s 3.1 227.8 > sign verify sign/s verify/s > dsa 512 bits 0.001709s 0.002074s 585.3 482.1 > dsa 1024 bits 0.004340s 0.005220s 230.4 191.6 > dsa 2048 bits 0.013038s 0.015497s 76.7 64.5 > > It doesn't seem that much different :-| > > Philippe > > > On Wednesday 31 October 2007 08:10:13 Philippe Marzouk wrote: > > > Hi, > > > > > > I haven a Via EN12000 with DL 1.3.4 I compiled at the end of july with > > > 2.6.21.5 kernel compiled for the VIA CPU. > > > > > > I get around 4MB/s of VPN throughput using ipsec-tools which is OK for > > > me as my DSL uplink is only around 1Mb/s and I use it with a WiFi > > > linksys router which does not go much faster than 2-3MB/s. > > > > > > Here is the output of openssl (not patched) speed on this system: > > > > > > OpenSSL 0.9.8e 23 Feb 2007 > > > built on: Sat Jul 28 19:14:16 Local time zone must be set--see zic > > > manual page 2007 options:bn(64,32) md2(int) rc4(idx,int) > > > des(ptr,risc1,16,long) aes(partial) idea(int) blowfish(idx) compiler: > > > gcc -fPIC -DOPENSSL_PIC -DZLIB_SHARED -DZLIB -DOPENSSL_THREADS > > > -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTERMIO -O3 > > > -fomit-frame-pointer -Wall -DOPENSSL_BN_ASM_PART_WORDS > > > -DOPENSSL_IA32_SSE2 -DSHA1_ASM -DMD5_ASM -DRMD160_ASM -DAES_ASM > > > available timing options: TIMES TIMEB HZ=100 [sysconf value] > > > timing function used: times > > > The 'numbers' are in 1000s of bytes per second processed. > > > type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 > > > bytes md2 445.58k 948.54k 1321.30k 1464.32k > > > 1517.44k mdc2 0.00 0.00 0.00 > > > 0.00 0.00 md4 4280.63k 14773.95k 42052.07k > > > 77736.62k 103557.33k md5 3946.47k 13920.19k > > > 40439.58k 78488.40k 107598.35k hmac(md5) 5471.18k > > > 18343.91k 49535.49k 85630.29k 109242.24k sha1 > > > 3514.75k 10887.00k 25903.43k 39475.71k 46310.83k rmd160 > > > 3080.74k 8926.14k 19499.32k 27568.13k 31437.49k rc4 > > > 40253.31k 45109.93k 46369.11k 46791.68k 46952.81k des > > > cbc > > > 12141.82k 12626.84k 12675.15k 12774.66k 12769.07k des ede3 > > > 4262.84k 4348.23k 4346.88k 4352.00k 4359.90k idea > > > cbc 7974.25k 8436.37k 8567.78k 8565.42k 8585.11k rc2 > > > cbc 4655.45k 4821.64k 4845.40k 4854.78k 4862.97k > > > rc5-32/12 cbc 0.00 0.00 0.00 0.00 0.00 > > > blowfish cbc 22059.53k 23586.54k 24061.43k 24029.64k > > > 24228.46k cast cbc 11002.71k 11694.29k 11943.30k > > > 11968.51k 11953.74k aes-128 cbc 14373.09k 16753.07k > > > 17594.91k 17753.43k 17818.97k aes-192 cbc 12547.46k > > > 14325.70k 14905.43k 15092.87k 15097.47k aes-256 cbc > > > 9892.17k 11976.45k 12751.03k 12893.87k 12966.53k camellia-128 > > > cbc 0.00 0.00 0.00 0.00 0.00 > > > camellia-192 cbc 0.00 0.00 0.00 0.00 > > > 0.00 camellia-256 cbc 0.00 0.00 0.00 0.00 > > > 0.00 sha256 2111.48k 5018.54k 9106.26k 11497.57k > > > 12397.96k sha512 1468.83k 5865.51k 11094.47k 17036.84k > > > 20446.90k sign verify sign/s verify/s > > > rsa 512 bits 0.002456s 0.000180s 407.2 5546.3 > > > rsa 1024 bits 0.010418s 0.000459s 96.0 2177.4 > > > rsa 2048 bits 0.053710s 0.001352s 18.6 739.7 > > > rsa 4096 bits 0.318437s 0.004379s 3.1 228.4 > > > sign verify sign/s verify/s > > > dsa 512 bits 0.001708s 0.002093s 585.5 477.9 > > > dsa 1024 bits 0.004340s 0.005343s 230.4 187.2 > > > dsa 2048 bits 0.013025s 0.015876s 76.8 63.0 > > > > > > I should try to patch when I get some time to compare the results. > > > > > > Philippe > > > > > > ----------------------------------------------------------------------- > > >-- This SF.net email is sponsored by: Splunk Inc. > > > Still grepping through log files to find problems? Stop. > > > Now Search log events and configuration files using AJAX and a browser. > > > Download your FREE copy of Splunk now >> http://get.splunk.com/ > > > _______________________________________________ > > > Devil-linux-discuss mailing list > > > Dev...@li... > > > https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss > > > > ------------------------------------------------------------------------- > > This SF.net email is sponsored by: Splunk Inc. > > Still grepping through log files to find problems? Stop. > > Now Search log events and configuration files using AJAX and a browser. > > Download your FREE copy of Splunk now >> http://get.splunk.com/ > > _______________________________________________ > > Devil-linux-discuss mailing list > > Dev...@li... > > https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss > > ------------------------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. > Still grepping through log files to find problems? Stop. > Now Search log events and configuration files using AJAX and a browser. > Download your FREE copy of Splunk now >> http://get.splunk.com/ > _______________________________________________ > Devil-linux-discuss mailing list > Dev...@li... > https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss |
