Re: [Ocf-linux-users] ocf-linux-20071215 and openssl speed -engine cryptodev

[Takashi L. <ta...@li...>]

Hya,

we ran into the same trouble some time ago (though using different hardware, 
i.e. x86 and HiFn accelerators).

We (unfortunatly only partly) solved the problem by applying the hints of the 
README.ENGINE file included in the OpenSSL source (as the cryptodev.so engine 
was never built automatically). Before that the errors encountered were 
exactly as stated below ...

In short we manually compiled the cryptodev engine according the README.ENGINE 
file, but 2 caveats remained (and I haven't had the time to look into it more 
concisely yet):

We only got it to compile, load and run, with not only using

	--with-cryptodev

but it also defining

	--with-cryptodev-digests

(which we appearently wanted to avoid) when running ./configure.

Without the second, the engine would compile and link cleanly, but OpenSSL 
would refuse to load the engine at runtime (error msg the same as below) ...

Moreover OpenSSL refuses to load the engine (independently of 
stating --with-cryptodev-digests or not) in our Linux-2.4/uClibC 
environment :-( though again it compiles without any warnings ...

Error msg again the same as below ...

Well, at least sort of some help(?) ... Or probably someone around who already 
solved this?

regards,

	-ta

On Monday 24 March 2008 13:33:28 David McCullough wrote:
> Jivin Nipper Lee lays it down ...
>
> > Hello,
> >
> > I'm working with the ocf-linux-20071215 release targeting hardware
> > with talitos (FSL SEC) and attempting to get openssl to use the
> > hardware for acceleration.
> >
> > I put ocf into the Linux 2.6.23 kernel and made some compile
> > fixes in crypto/ocf/talitos.c to get it building.
> > (I will post patches once they are working.)
> >
> > I applied the openssl-0.9.8g.patch to openssl
> > and configured openssl --with cryptodev and openssl built ok.
> >
> > I've hit a snag running openssl and I need a nudge in the right
> > direction.
> >
> > When I run 'openssl speed' referencing the cryptodev engine
> > (see console output below), there's a missing engines library
> > (libcryptodev.so).
> > I'm not sure what software component should provide this library.
>
> I normally build it without HW support.  I think it gets confused
> because cryptodev is built in and never loaded as a .so.
>
> Add "no-hw" to your config options and see if that helps,
>
> Cheers,
> Davidm
>
> > / # openssl speed -evp des -engine cryptodev -elapsed
> > invalid engine "cryptodev"
> > 708:error:25066067:DSO support routines:DLFCN_LOAD:could not load the
> > shared lib
> > rary:dso_dlfcn.c:162:filename(/usr/lib/engines/libcryptodev.so):
> > /usr/lib/engine
> > s/libcryptodev.so: cannot open shared object file: No such file or
> > directory
> > 708:error:25070067:DSO support routines:DSO_load:could not load the
> > shared libra
> > ry:dso_lib.c:244:
> > 708:error:260B6084:engine routines:DYNAMIC_LOAD:dso not
> > found:eng_dyn.c:450:
> > 708:error:2606A074:engine routines:ENGINE_by_id:no such
> > engine:eng_list.c:415:id
> > =cryptodev
> > 708:error:25066067:DSO support routines:DLFCN_LOAD:could not load the
> > shared lib
> > rary:dso_dlfcn.c:162:filename(libcryptodev.so): libcryptodev.so: cannot
> > open sha
> > red object file: No such file or directory
> > 708:error:25070067:DSO support routines:DSO_load:could not load the
> > shared libra
> > ry:dso_lib.c:244:
> > 708:error:260B6084:engine routines:DYNAMIC_LOAD:dso not
> > found:eng_dyn.c:450:
> > You have chosen to measure elapsed time instead of user CPU time.
> > To get the most accurate results, try to run this
> > program when this computer is idle.
> > Doing des-cbc for 3s on 16 size blocks: 1226408 des-cbc's in 3.00s
> > Doing des-cbc for 3s on 64 size blocks: 341066 des-cbc's in 3.00s
> > Doing des-cbc for 3s on 256 size blocks: 87708 des-cbc's in 3.00s
> > Doing des-cbc for 3s on 1024 size blocks: 22085 des-cbc's in 3.00s
> > Doing des-cbc for 3s on 2048 size blocks: 11056 des-cbc's in 3.00s
> > OpenSSL 0.9.8g 19 Oct 2007
> > built on: Fri Mar 21 18:56:03 CDT 2008
> > options:bn(64,32) md2(int) rc4(ptr,char) des(idx,risc1,16,long)
> > aes(partial) ide
> > a(int) blowfish(idx)
> > compiler: gcc -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT
> > -DDSO_DLFCN -DH
> > AVE_DLFCN_H -DHAVE_CRYPTODEV -DB_ENDIAN -DB_ENDIAN -DTERMIO -O3 -Wall
> > available timing options: TIMES TIMEB HZ=100 [sysconf value]
> > timing function used: ftime
> > The 'numbers' are in 1000s of bytes per second processed.
> > type             16 bytes     64 bytes    256 bytes   1024 bytes   2048
> > bytes
> > des-cbc           6540.84k     7266.39k     7474.45k     7528.31k
> > 7537.51k
> > / #
> >
> > -------------------------------------------------------------------------
> > This SF.net email is sponsored by: Microsoft
> > Defy all challenges. Microsoft(R) Visual Studio 2008.
> > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
> > _______________________________________________
> > Ocf-linux-users mailing list
> > Ocf...@li...
> > https://lists.sourceforge.net/lists/listinfo/ocf-linux-users