Menu
▾
▴
Re: [Devil-Linux-discuss] VIA C3/C7 PadLock hardware crypto
|
From: Dmitry K. <dm...@dz...> - 2007-11-01 19:07:52
|
On Thursday 01 November 2007 20:33:13 Philippe Marzouk wrote: > I used: > > openssl speed -engine padlock Sounds stupid, but with this command I also get usual low results: aes-128 cbc 10348.65k 13694.81k 15005.60k 15375.65k 15488.60k aes-192 cbc 9252.99k 11821.35k 12781.20k 13046.30k 13126.25k aes-256 cbc 8341.65k 10197.77k 10907.98k 11100.02k 11161.26k Would someone explain this? > > > I did some tests on the cheap MaxTerm 8500 device where I have remote > > access (VIA C3 1GHz, 512 RAM), it runs ImediaLinux distribution. Results > > are just terrific for such unexpensive device, wish I have this with > > Devil: > > > > [root@crypto]# openssl speed -evp aes-128-cbc -engine padlock > > engine "padlock" set. > > type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 > > bytes aes-128-cbc 35042.17k 124617.57k 331076.12k 560053.16k > > 701632.55k > > I tried with the command line above: > > type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 > bytes aes-128-cbc 40436.20k 106822.84k 160375.95k 207363.79k > 246063.72k > > *much* better, this is weird > > Philippe > > > [root@crypto]# openssl speed -evp aes-192-cbc -engine padlock > > engine "padlock" set. > > type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 > > bytes aes-192-cbc 35613.74k 121805.44k 307919.11k 492034.72k > > 597090.66k > > > > [root@crypto]# openssl speed -evp aes-256-cbc -engine padlock > > engine "padlock" set. > > type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 > > bytes aes-256-cbc 35539.32k 118421.56k 271725.80k 430060.27k > > 517467.68k > > > > Compare to the same board but without padlock support: > > type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 > > bytes aes-128-cbc 10915.99k 13937.99k 15080.02k 15395.04k > > 15491.32k aes-192-cbc 9679.55k 11995.28k 12832.40k > > 13059.91k 13126.25k aes-256-cbc 8705.40k 10333.62k > > 10947.27k 11106.15k 11161.26k > > > > On Thursday 01 November 2007 18:36:55 Philippe Marzouk wrote: > > > On Thu, Nov 01, 2007 at 02:30:22PM +0200, Dmitry Komarov wrote: > > > > Hello, > > > > > > > > Is it a VIA C3 or C7 CPU? And at which ferquency? > > > > > > This is a C7 1.2Ghz > > > > > > > You said that you compiled your kernel with VIA support, but did you > > > > enable Hardware Crypto option in the kernel with appropriate chipset > > > > selection? Did you load those padlock crypto modules before testing > > > > openssl speed? > > > > > > They are available as modules: > > > > > > CONFIG_CRYPTO_DEV_PADLOCK=m > > > CONFIG_CRYPTO_DEV_PADLOCK_AES=m > > > CONFIG_CRYPTO_DEV_PADLOCK_SHA=m > > > > > > However they were not loaded (duh!) > > > > > > dmesg gives: > > > padlock: Using VIA PadLock ACE for AES algorithm. > > > padlock: Using VIA PadLock ACE for SHA1/SHA256 algorithms. > > > padlock: 3 drivers are available. > > > > > > I rerun with -engine padlock > > > > > > Here are the results: > > > > > > type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 > > > bytes md2 448.75k 956.13k 1323.52k 1465.69k > > > 1514.70k mdc2 0.00 0.00 0.00 > > > 0.00 0.00 md4 4282.78k 14819.72k 41912.49k > > > 77754.03k 103565.57k md5 3959.09k 13873.69k > > > 40602.79k 78527.44k 107205.61k hmac(md5) 5490.57k > > > 18332.86k 49374.12k 85938.94k 109242.24k sha1 > > > 3519.95k 10891.07k 25894.19k 39226.00k 46636.48k rmd160 > > > 3082.02k 8920.64k 19502.49k 27558.57k 31507.69k rc4 > > > 40262.22k 45080.70k 46477.19k 46987.46k 46951.08k des > > > cbc > > > 12101.70k 12627.39k 12721.15k 12756.70k 12763.14k des ede3 > > > 4266.98k 4347.14k 4341.67k 4342.17k 4361.76k idea > > > cbc 7960.33k 8435.11k 8569.66k 8570.67k 8585.22k rc2 > > > cbc 4671.14k 4805.63k 4846.34k 4858.85k 4860.59k > > > rc5-32/12 cbc 0.00 0.00 0.00 0.00 0.00 > > > blowfish cbc 21997.17k 23662.88k 23998.63k 24124.13k > > > 24160.94k cast cbc 11005.77k 11734.43k 11903.83k > > > 11972.21k 11990.36k aes-128 cbc 14383.44k 16745.86k > > > 17592.85k 17700.13k 17879.93k aes-192 cbc 12539.86k > > > 14336.00k 14902.53k 15099.00k 15076.01k aes-256 cbc > > > 11135.32k 12442.28k 12781.63k 12979.29k 12997.61k camellia-128 > > > cbc 0.00 0.00 0.00 0.00 0.00 > > > camellia-192 cbc 0.00 0.00 0.00 0.00 > > > 0.00 camellia-256 cbc 0.00 0.00 0.00 0.00 > > > 0.00 sha256 2103.55k 5018.65k 9140.31k 11461.97k > > > 12395.21k sha512 1468.30k 5881.13k 11065.86k 17101.14k > > > 20367.29k sign verify sign/s verify/s > > > rsa 512 bits 0.002456s 0.000181s 407.2 5516.4 > > > rsa 1024 bits 0.010418s 0.000461s 96.0 2171.3 > > > rsa 2048 bits 0.053763s 0.001345s 18.6 743.7 > > > rsa 4096 bits 0.318437s 0.004390s 3.1 227.8 > > > sign verify sign/s verify/s > > > dsa 512 bits 0.001709s 0.002074s 585.3 482.1 > > > dsa 1024 bits 0.004340s 0.005220s 230.4 191.6 > > > dsa 2048 bits 0.013038s 0.015497s 76.7 64.5 > > > > > > It doesn't seem that much different :-| > > > > > > Philippe > > > > > > > On Wednesday 31 October 2007 08:10:13 Philippe Marzouk wrote: > > > > > Hi, > > > > > > > > > > I haven a Via EN12000 with DL 1.3.4 I compiled at the end of july > > > > > with 2.6.21.5 kernel compiled for the VIA CPU. > > > > > > > > > > I get around 4MB/s of VPN throughput using ipsec-tools which is OK > > > > > for me as my DSL uplink is only around 1Mb/s and I use it with a > > > > > WiFi linksys router which does not go much faster than 2-3MB/s. > > > > > > > > > > Here is the output of openssl (not patched) speed on this system: > > > > > > > > > > OpenSSL 0.9.8e 23 Feb 2007 > > > > > built on: Sat Jul 28 19:14:16 Local time zone must be set--see zic > > > > > manual page 2007 options:bn(64,32) md2(int) rc4(idx,int) > > > > > des(ptr,risc1,16,long) aes(partial) idea(int) blowfish(idx) > > > > > compiler: gcc -fPIC -DOPENSSL_PIC -DZLIB_SHARED -DZLIB > > > > > -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H > > > > > -DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall > > > > > -DOPENSSL_BN_ASM_PART_WORDS > > > > > -DOPENSSL_IA32_SSE2 -DSHA1_ASM -DMD5_ASM -DRMD160_ASM -DAES_ASM > > > > > available timing options: TIMES TIMEB HZ=100 [sysconf value] > > > > > timing function used: times > > > > > The 'numbers' are in 1000s of bytes per second processed. > > > > > type 16 bytes 64 bytes 256 bytes 1024 bytes > > > > > 8192 bytes md2 445.58k 948.54k 1321.30k > > > > > 1464.32k 1517.44k mdc2 0.00 0.00 > > > > > 0.00 0.00 0.00 md4 4280.63k 14773.95k 42052.07k > > > > > 77736.62k 103557.33k md5 3946.47k 13920.19k > > > > > 40439.58k 78488.40k 107598.35k hmac(md5) 5471.18k > > > > > 18343.91k 49535.49k 85630.29k 109242.24k sha1 > > > > > 3514.75k 10887.00k 25903.43k 39475.71k 46310.83k rmd160 > > > > > 3080.74k 8926.14k 19499.32k 27568.13k 31437.49k rc4 > > > > > 40253.31k 45109.93k 46369.11k 46791.68k 46952.81k > > > > > des cbc > > > > > 12141.82k 12626.84k 12675.15k 12774.66k 12769.07k des > > > > > ede3 4262.84k 4348.23k 4346.88k 4352.00k 4359.90k > > > > > idea cbc 7974.25k 8436.37k 8567.78k 8565.42k > > > > > 8585.11k rc2 cbc 4655.45k 4821.64k 4845.40k 4854.78k > > > > > 4862.97k rc5-32/12 cbc 0.00 0.00 0.00 > > > > > 0.00 0.00 blowfish cbc 22059.53k 23586.54k 24061.43k > > > > > 24029.64k 24228.46k cast cbc 11002.71k 11694.29k > > > > > 11943.30k 11968.51k 11953.74k aes-128 cbc 14373.09k > > > > > 16753.07k 17594.91k 17753.43k 17818.97k aes-192 cbc > > > > > 12547.46k 14325.70k 14905.43k 15092.87k 15097.47k aes-256 cbc > > > > > 9892.17k 11976.45k 12751.03k 12893.87k 12966.53k > > > > > camellia-128 cbc 0.00 0.00 0.00 0.00 > > > > > 0.00 camellia-192 cbc 0.00 0.00 0.00 0.00 > > > > > 0.00 camellia-256 cbc 0.00 0.00 0.00 0.00 > > > > > 0.00 sha256 2111.48k 5018.54k 9106.26k 11497.57k > > > > > 12397.96k sha512 1468.83k 5865.51k 11094.47k 17036.84k > > > > > 20446.90k sign verify sign/s verify/s > > > > > rsa 512 bits 0.002456s 0.000180s 407.2 5546.3 > > > > > rsa 1024 bits 0.010418s 0.000459s 96.0 2177.4 > > > > > rsa 2048 bits 0.053710s 0.001352s 18.6 739.7 > > > > > rsa 4096 bits 0.318437s 0.004379s 3.1 228.4 > > > > > sign verify sign/s verify/s > > > > > dsa 512 bits 0.001708s 0.002093s 585.5 477.9 > > > > > dsa 1024 bits 0.004340s 0.005343s 230.4 187.2 > > > > > dsa 2048 bits 0.013025s 0.015876s 76.8 63.0 > > > > > > > > > > I should try to patch when I get some time to compare the results. > > > > > > > > > > Philippe > > > > > > > > > > ------------------------------------------------------------------- > > > > >---- -- This SF.net email is sponsored by: Splunk Inc. > > > > > Still grepping through log files to find problems? Stop. > > > > > Now Search log events and configuration files using AJAX and a > > > > > browser. Download your FREE copy of Splunk now >> > > > > > http://get.splunk.com/ > > > > > _______________________________________________ > > > > > Devil-linux-discuss mailing list > > > > > Dev...@li... > > > > > https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss > > > > > > > > --------------------------------------------------------------------- > > > >---- This SF.net email is sponsored by: Splunk Inc. > > > > Still grepping through log files to find problems? Stop. > > > > Now Search log events and configuration files using AJAX and a > > > > browser. Download your FREE copy of Splunk now >> > > > > http://get.splunk.com/ > > > > _______________________________________________ > > > > Devil-linux-discuss mailing list > > > > Dev...@li... > > > > https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss > > ------------------------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. > Still grepping through log files to find problems? Stop. > Now Search log events and configuration files using AJAX and a browser. > Download your FREE copy of Splunk now >> http://get.splunk.com/ > _______________________________________________ > Devil-linux-discuss mailing list > Dev...@li... > https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss |
