Re: [Ocf-linux-users] Geode AES Engine and ocf - not working?
Brought to you by:
david-m
Menu
▾
▴
Re: [Ocf-linux-users] Geode AES Engine and ocf - not working?
|
From: David M. <Dav...@se...> - 2008-08-05 23:48:38
|
Jivin Kevin Fibich lays it down ... > Hi! > > Got a strange error from cryptotest -a aes -v > > CIOCGSESSION: Invalid argument > > I get this, no matter if cryptosoft or geode_aes is loaded ... > If cryptodev is not loaded it tells me that there is no /dev/crypto (which is created by udev on module load) > > My lsmod when freshly booted: > > Module Size Used by > geode_aes 5380 0 > cryptodev 11268 0 > crypto_blkcipher 14084 1 geode_aes > crypto_algapi 11648 2 geode_aes,crypto_blkcipher Are you loading cryptosoft after the geode modules ? It needs to detect aes support in the kernel crypto in order to support it. > *Note that ocf is compiled directly into the kernel > > cryptotest output with cryptodev: > > crid = 3000000 > cipher aes keylen 16 > CIOCGSESSION: Invalid argument Hmm, no idea at the moment. Hopefully someone with this running is listening :-) Cheers, Davidm > Without cryptodev: > > cryptotest: /dev/crypto: No such file or directory > > openssl speed aes with cryptodev: > > OpenSSL 0.9.8g 19 Oct 2007 > built on: Mon Aug 4 11:48:35 CEST 2008 > options:bn(64,32) md2(int) rc4(idx,int) des(ptr,risc1,16,long) aes(partial) idea(int) blowfish(idx) > compiler: gcc -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DHAVE_CRYPTODEV -DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall -DOPENSSL_BN_ASM_PART_WORDS -DOPENSSL_IA32_SSE2 -DSHA1_ASM -DMD5_ASM -DRMD160_ASM -DAES_ASM > available timing options: TIMES TIMEB HZ=100 [sysconf value] > timing function used: times > The 'numbers' are in 1000s of bytes per second processed. > type 16 bytes 64 bytes 256 bytes 1024 bytes 2048 bytes > aes-128 cbc 5227.73k 7176.36k 7990.44k 8201.90k 8227.50k > aes-192 cbc 4687.34k 6225.54k 6809.60k 6961.83k 6980.27k > aes-256 cbc 4260.90k 5485.61k 5930.41k 6048.09k 6062.08k > > without cryptodev: > > OpenSSL 0.9.8g 19 Oct 2007 > built on: Mon Aug 4 11:48:35 CEST 2008 > options:bn(64,32) md2(int) rc4(idx,int) des(ptr,risc1,16,long) aes(partial) idea(int) blowfish(idx) > compiler: gcc -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DHAVE_CRYPTODEV -DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall -DOPENSSL_BN_ASM_PART_WORDS -DOPENSSL_IA32_SSE2 -DSHA1_ASM -DMD5_ASM -DRMD160_ASM -DAES_ASM > available timing options: TIMES TIMEB HZ=100 [sysconf value] > timing function used: times > The 'numbers' are in 1000s of bytes per second processed. > type 16 bytes 64 bytes 256 bytes 1024 bytes 2048 bytes > aes-128 cbc 5280.08k 7228.65k 8008.62k 8230.91k 8263.68k > aes-192 cbc 4726.69k 6244.37k 6821.89k 6982.66k 7004.84k > aes-256 cbc 5019.08k 5731.31k 5964.29k 6029.31k 6036.82k > > Dmesg gives the following message: > > cryptodev: module license 'BSD' taints kernel. > > I really dont know what could be wrong ... > > Kernel is linux-2.6.26 patched with > > Aufs cvs + squashfs 3.3 > > ocf-linux-26-20080704.patch and ocf-2.6.26.patch from this list. > > Openssl got the patch from ocf-linux-20080704.tar.gz > > I doublechecked everything i have in mind ... i really cant find any issue. > > -----Ursprüngliche Nachricht----- > Von: David McCullough [mailto:Dav...@se...] > Gesendet: Dienstag, 5. August 2008 12:54 > An: Kevin Fibich > Cc: ocf...@li... > Betreff: Re: [Ocf-linux-users] Geode AES Engine and ocf - not working? > > > Jivin Kevin Fibich lays it down ... > > > > > > Hi! > > > > First of all, thanks fort he fast answer ;-) > > Is it possible that you just added the ssl aes192 patch to your answer? > > I took a look into it and found just aes192 and arc four support patched into openssl cryptodev engine ... > > I'm having a bad day, AES was always in there, just recently RC4 and > AES192 were added. > > Have a look at the mail list archives, several before you have got this > working on the geode, it's just a matter of getting it all together > correctly. If you can't find anything then send in: > > * output of lsmod (if you are running as modules) > * output of "cryptotest -a aes" with cryptodev loaded and without > cryptodev loaded. > * output of "openssl speed -evp aes -elapsed" with cryptodev loaded > and without. > > Note that openssl uses cryptodev by default if it detects it. > > Cheers, > Davidm > > > -----Ursprüngliche Nachricht----- > > Von: David McCullough [mailto:Dav...@se...] > > Gesendet: Dienstag, 5. August 2008 01:46 > > An: Kevin Fibich > > Cc: ocf...@li... > > Betreff: Re: [Ocf-linux-users] Geode AES Engine and ocf - not working? > > > > Jivin Kevin Fibich lays it down ... > > > Hi there! > > > > > > I am trying to use ocf-linux to get my geode aes engine up and running > > > for vpn encryption. After days of patching an recompiling on and on i > > > finally got everything working ... i thought. > > > > > > My kernel has ocf linux compiled in and geode_aes, cryptodev + > > > cryptosoft (for testing) compiled as modules. > > > My Openssl has the cryptodev patch and lists the cryptodev engine, but > > > if i encrypt something with and without cryptodev the performance is the > > > same. > > > > > > Maybe someone has an idea or already expirience something like this? > > > Did i forget something? > > > > Yes, some patches were posted to the list IIRC, or maybe not. > > > > Anyway, here are the bits ot get user-space acceleration for AES. > > You probably only need the ssl patch unless you are using cryptotest to > > test the speed, > > > > Cheers, > > Davidm > > > > -- > > David McCullough, dav...@se..., Ph:+61 734352815 > > Secure Computing - SnapGear http://www.uCdot.org http://www.snapgear.com > > > > -- > David McCullough, dav...@se..., Ph:+61 734352815 > Secure Computing - SnapGear http://www.uCdot.org http://www.snapgear.com > -- David McCullough, dav...@se..., Ph:+61 734352815 Secure Computing - SnapGear http://www.uCdot.org http://www.snapgear.com |
