Thread: [Ocf-linux-users] Geode AES Engine and ocf - not working?
Brought to you by:
david-m
|
From: Kevin F. <ke...@wh...> - 2008-08-04 12:03:02
|
Hi there! I am trying to use ocf-linux to get my geode aes engine up and running for vpn encryption. After days of patching an recompiling on and on i finally got everything working ... i thought. My kernel has ocf linux compiled in and geode_aes, cryptodev + cryptosoft (for testing) compiled as modules. My Openssl has the cryptodev patch and lists the cryptodev engine, but if i encrypt something with and without cryptodev the performance is the same. Maybe someone has an idea or already expirience something like this? Did i forget something? Greets Kevin |
|
From: David M. <Dav...@se...> - 2008-08-04 23:46:16
Attachments:
ocf-cryptotools-aes.patch
ocf-ssl-aes.patch
|
Jivin Kevin Fibich lays it down ... > Hi there! > > I am trying to use ocf-linux to get my geode aes engine up and running > for vpn encryption. After days of patching an recompiling on and on i > finally got everything working ... i thought. > > My kernel has ocf linux compiled in and geode_aes, cryptodev + > cryptosoft (for testing) compiled as modules. > My Openssl has the cryptodev patch and lists the cryptodev engine, but > if i encrypt something with and without cryptodev the performance is the > same. > > Maybe someone has an idea or already expirience something like this? > Did i forget something? Yes, some patches were posted to the list IIRC, or maybe not. Anyway, here are the bits ot get user-space acceleration for AES. You probably only need the ssl patch unless you are using cryptotest to test the speed, Cheers, Davidm -- David McCullough, dav...@se..., Ph:+61 734352815 Secure Computing - SnapGear http://www.uCdot.org http://www.snapgear.com |
|
From: Kevin F. <ke...@wh...> - 2008-08-05 08:40:34
|
Hi! First of all, thanks fort he fast answer ;-) Is it possible that you just added the ssl aes192 patch to your answer? I took a look into it and found just aes192 and arc four support patched into openssl cryptodev engine ... Best regards Kevin -----Ursprüngliche Nachricht----- Von: David McCullough [mailto:Dav...@se...] Gesendet: Dienstag, 5. August 2008 01:46 An: Kevin Fibich Cc: ocf...@li... Betreff: Re: [Ocf-linux-users] Geode AES Engine and ocf - not working? Jivin Kevin Fibich lays it down ... > Hi there! > > I am trying to use ocf-linux to get my geode aes engine up and running > for vpn encryption. After days of patching an recompiling on and on i > finally got everything working ... i thought. > > My kernel has ocf linux compiled in and geode_aes, cryptodev + > cryptosoft (for testing) compiled as modules. > My Openssl has the cryptodev patch and lists the cryptodev engine, but > if i encrypt something with and without cryptodev the performance is the > same. > > Maybe someone has an idea or already expirience something like this? > Did i forget something? Yes, some patches were posted to the list IIRC, or maybe not. Anyway, here are the bits ot get user-space acceleration for AES. You probably only need the ssl patch unless you are using cryptotest to test the speed, Cheers, Davidm -- David McCullough, dav...@se..., Ph:+61 734352815 Secure Computing - SnapGear http://www.uCdot.org http://www.snapgear.com |
|
From: David M. <Dav...@se...> - 2008-08-05 10:53:58
|
Jivin Kevin Fibich lays it down ... > > > Hi! > > First of all, thanks fort he fast answer ;-) > Is it possible that you just added the ssl aes192 patch to your answer? > I took a look into it and found just aes192 and arc four support patched into openssl cryptodev engine ... I'm having a bad day, AES was always in there, just recently RC4 and AES192 were added. Have a look at the mail list archives, several before you have got this working on the geode, it's just a matter of getting it all together correctly. If you can't find anything then send in: * output of lsmod (if you are running as modules) * output of "cryptotest -a aes" with cryptodev loaded and without cryptodev loaded. * output of "openssl speed -evp aes -elapsed" with cryptodev loaded and without. Note that openssl uses cryptodev by default if it detects it. Cheers, Davidm > -----Ursprüngliche Nachricht----- > Von: David McCullough [mailto:Dav...@se...] > Gesendet: Dienstag, 5. August 2008 01:46 > An: Kevin Fibich > Cc: ocf...@li... > Betreff: Re: [Ocf-linux-users] Geode AES Engine and ocf - not working? > > Jivin Kevin Fibich lays it down ... > > Hi there! > > > > I am trying to use ocf-linux to get my geode aes engine up and running > > for vpn encryption. After days of patching an recompiling on and on i > > finally got everything working ... i thought. > > > > My kernel has ocf linux compiled in and geode_aes, cryptodev + > > cryptosoft (for testing) compiled as modules. > > My Openssl has the cryptodev patch and lists the cryptodev engine, but > > if i encrypt something with and without cryptodev the performance is the > > same. > > > > Maybe someone has an idea or already expirience something like this? > > Did i forget something? > > Yes, some patches were posted to the list IIRC, or maybe not. > > Anyway, here are the bits ot get user-space acceleration for AES. > You probably only need the ssl patch unless you are using cryptotest to > test the speed, > > Cheers, > Davidm > > -- > David McCullough, dav...@se..., Ph:+61 734352815 > Secure Computing - SnapGear http://www.uCdot.org http://www.snapgear.com > -- David McCullough, dav...@se..., Ph:+61 734352815 Secure Computing - SnapGear http://www.uCdot.org http://www.snapgear.com |
|
From: Kevin F. <ke...@wh...> - 2008-08-05 12:02:53
|
Hi! Got a strange error from cryptotest -a aes -v CIOCGSESSION: Invalid argument I get this, no matter if cryptosoft or geode_aes is loaded ... If cryptodev is not loaded it tells me that there is no /dev/crypto (which is created by udev on module load) My lsmod when freshly booted: Module Size Used by geode_aes 5380 0 cryptodev 11268 0 crypto_blkcipher 14084 1 geode_aes crypto_algapi 11648 2 geode_aes,crypto_blkcipher *Note that ocf is compiled directly into the kernel cryptotest output with cryptodev: crid = 3000000 cipher aes keylen 16 CIOCGSESSION: Invalid argument Without cryptodev: cryptotest: /dev/crypto: No such file or directory openssl speed aes with cryptodev: OpenSSL 0.9.8g 19 Oct 2007 built on: Mon Aug 4 11:48:35 CEST 2008 options:bn(64,32) md2(int) rc4(idx,int) des(ptr,risc1,16,long) aes(partial) idea(int) blowfish(idx) compiler: gcc -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DHAVE_CRYPTODEV -DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall -DOPENSSL_BN_ASM_PART_WORDS -DOPENSSL_IA32_SSE2 -DSHA1_ASM -DMD5_ASM -DRMD160_ASM -DAES_ASM available timing options: TIMES TIMEB HZ=100 [sysconf value] timing function used: times The 'numbers' are in 1000s of bytes per second processed. type 16 bytes 64 bytes 256 bytes 1024 bytes 2048 bytes aes-128 cbc 5227.73k 7176.36k 7990.44k 8201.90k 8227.50k aes-192 cbc 4687.34k 6225.54k 6809.60k 6961.83k 6980.27k aes-256 cbc 4260.90k 5485.61k 5930.41k 6048.09k 6062.08k without cryptodev: OpenSSL 0.9.8g 19 Oct 2007 built on: Mon Aug 4 11:48:35 CEST 2008 options:bn(64,32) md2(int) rc4(idx,int) des(ptr,risc1,16,long) aes(partial) idea(int) blowfish(idx) compiler: gcc -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DHAVE_CRYPTODEV -DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall -DOPENSSL_BN_ASM_PART_WORDS -DOPENSSL_IA32_SSE2 -DSHA1_ASM -DMD5_ASM -DRMD160_ASM -DAES_ASM available timing options: TIMES TIMEB HZ=100 [sysconf value] timing function used: times The 'numbers' are in 1000s of bytes per second processed. type 16 bytes 64 bytes 256 bytes 1024 bytes 2048 bytes aes-128 cbc 5280.08k 7228.65k 8008.62k 8230.91k 8263.68k aes-192 cbc 4726.69k 6244.37k 6821.89k 6982.66k 7004.84k aes-256 cbc 5019.08k 5731.31k 5964.29k 6029.31k 6036.82k Dmesg gives the following message: cryptodev: module license 'BSD' taints kernel. I really dont know what could be wrong ... Kernel is linux-2.6.26 patched with Aufs cvs + squashfs 3.3 ocf-linux-26-20080704.patch and ocf-2.6.26.patch from this list. Openssl got the patch from ocf-linux-20080704.tar.gz I doublechecked everything i have in mind ... i really cant find any issue. -----Ursprüngliche Nachricht----- Von: David McCullough [mailto:Dav...@se...] Gesendet: Dienstag, 5. August 2008 12:54 An: Kevin Fibich Cc: ocf...@li... Betreff: Re: [Ocf-linux-users] Geode AES Engine and ocf - not working? Jivin Kevin Fibich lays it down ... > > > Hi! > > First of all, thanks fort he fast answer ;-) > Is it possible that you just added the ssl aes192 patch to your answer? > I took a look into it and found just aes192 and arc four support patched into openssl cryptodev engine ... I'm having a bad day, AES was always in there, just recently RC4 and AES192 were added. Have a look at the mail list archives, several before you have got this working on the geode, it's just a matter of getting it all together correctly. If you can't find anything then send in: * output of lsmod (if you are running as modules) * output of "cryptotest -a aes" with cryptodev loaded and without cryptodev loaded. * output of "openssl speed -evp aes -elapsed" with cryptodev loaded and without. Note that openssl uses cryptodev by default if it detects it. Cheers, Davidm > -----Ursprüngliche Nachricht----- > Von: David McCullough [mailto:Dav...@se...] > Gesendet: Dienstag, 5. August 2008 01:46 > An: Kevin Fibich > Cc: ocf...@li... > Betreff: Re: [Ocf-linux-users] Geode AES Engine and ocf - not working? > > Jivin Kevin Fibich lays it down ... > > Hi there! > > > > I am trying to use ocf-linux to get my geode aes engine up and running > > for vpn encryption. After days of patching an recompiling on and on i > > finally got everything working ... i thought. > > > > My kernel has ocf linux compiled in and geode_aes, cryptodev + > > cryptosoft (for testing) compiled as modules. > > My Openssl has the cryptodev patch and lists the cryptodev engine, but > > if i encrypt something with and without cryptodev the performance is the > > same. > > > > Maybe someone has an idea or already expirience something like this? > > Did i forget something? > > Yes, some patches were posted to the list IIRC, or maybe not. > > Anyway, here are the bits ot get user-space acceleration for AES. > You probably only need the ssl patch unless you are using cryptotest to > test the speed, > > Cheers, > Davidm > > -- > David McCullough, dav...@se..., Ph:+61 734352815 > Secure Computing - SnapGear http://www.uCdot.org http://www.snapgear.com > -- David McCullough, dav...@se..., Ph:+61 734352815 Secure Computing - SnapGear http://www.uCdot.org http://www.snapgear.com |
|
From: David M. <Dav...@se...> - 2008-08-05 23:48:38
|
Jivin Kevin Fibich lays it down ... > Hi! > > Got a strange error from cryptotest -a aes -v > > CIOCGSESSION: Invalid argument > > I get this, no matter if cryptosoft or geode_aes is loaded ... > If cryptodev is not loaded it tells me that there is no /dev/crypto (which is created by udev on module load) > > My lsmod when freshly booted: > > Module Size Used by > geode_aes 5380 0 > cryptodev 11268 0 > crypto_blkcipher 14084 1 geode_aes > crypto_algapi 11648 2 geode_aes,crypto_blkcipher Are you loading cryptosoft after the geode modules ? It needs to detect aes support in the kernel crypto in order to support it. > *Note that ocf is compiled directly into the kernel > > cryptotest output with cryptodev: > > crid = 3000000 > cipher aes keylen 16 > CIOCGSESSION: Invalid argument Hmm, no idea at the moment. Hopefully someone with this running is listening :-) Cheers, Davidm > Without cryptodev: > > cryptotest: /dev/crypto: No such file or directory > > openssl speed aes with cryptodev: > > OpenSSL 0.9.8g 19 Oct 2007 > built on: Mon Aug 4 11:48:35 CEST 2008 > options:bn(64,32) md2(int) rc4(idx,int) des(ptr,risc1,16,long) aes(partial) idea(int) blowfish(idx) > compiler: gcc -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DHAVE_CRYPTODEV -DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall -DOPENSSL_BN_ASM_PART_WORDS -DOPENSSL_IA32_SSE2 -DSHA1_ASM -DMD5_ASM -DRMD160_ASM -DAES_ASM > available timing options: TIMES TIMEB HZ=100 [sysconf value] > timing function used: times > The 'numbers' are in 1000s of bytes per second processed. > type 16 bytes 64 bytes 256 bytes 1024 bytes 2048 bytes > aes-128 cbc 5227.73k 7176.36k 7990.44k 8201.90k 8227.50k > aes-192 cbc 4687.34k 6225.54k 6809.60k 6961.83k 6980.27k > aes-256 cbc 4260.90k 5485.61k 5930.41k 6048.09k 6062.08k > > without cryptodev: > > OpenSSL 0.9.8g 19 Oct 2007 > built on: Mon Aug 4 11:48:35 CEST 2008 > options:bn(64,32) md2(int) rc4(idx,int) des(ptr,risc1,16,long) aes(partial) idea(int) blowfish(idx) > compiler: gcc -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DHAVE_CRYPTODEV -DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall -DOPENSSL_BN_ASM_PART_WORDS -DOPENSSL_IA32_SSE2 -DSHA1_ASM -DMD5_ASM -DRMD160_ASM -DAES_ASM > available timing options: TIMES TIMEB HZ=100 [sysconf value] > timing function used: times > The 'numbers' are in 1000s of bytes per second processed. > type 16 bytes 64 bytes 256 bytes 1024 bytes 2048 bytes > aes-128 cbc 5280.08k 7228.65k 8008.62k 8230.91k 8263.68k > aes-192 cbc 4726.69k 6244.37k 6821.89k 6982.66k 7004.84k > aes-256 cbc 5019.08k 5731.31k 5964.29k 6029.31k 6036.82k > > Dmesg gives the following message: > > cryptodev: module license 'BSD' taints kernel. > > I really dont know what could be wrong ... > > Kernel is linux-2.6.26 patched with > > Aufs cvs + squashfs 3.3 > > ocf-linux-26-20080704.patch and ocf-2.6.26.patch from this list. > > Openssl got the patch from ocf-linux-20080704.tar.gz > > I doublechecked everything i have in mind ... i really cant find any issue. > > -----Ursprüngliche Nachricht----- > Von: David McCullough [mailto:Dav...@se...] > Gesendet: Dienstag, 5. August 2008 12:54 > An: Kevin Fibich > Cc: ocf...@li... > Betreff: Re: [Ocf-linux-users] Geode AES Engine and ocf - not working? > > > Jivin Kevin Fibich lays it down ... > > > > > > Hi! > > > > First of all, thanks fort he fast answer ;-) > > Is it possible that you just added the ssl aes192 patch to your answer? > > I took a look into it and found just aes192 and arc four support patched into openssl cryptodev engine ... > > I'm having a bad day, AES was always in there, just recently RC4 and > AES192 were added. > > Have a look at the mail list archives, several before you have got this > working on the geode, it's just a matter of getting it all together > correctly. If you can't find anything then send in: > > * output of lsmod (if you are running as modules) > * output of "cryptotest -a aes" with cryptodev loaded and without > cryptodev loaded. > * output of "openssl speed -evp aes -elapsed" with cryptodev loaded > and without. > > Note that openssl uses cryptodev by default if it detects it. > > Cheers, > Davidm > > > -----Ursprüngliche Nachricht----- > > Von: David McCullough [mailto:Dav...@se...] > > Gesendet: Dienstag, 5. August 2008 01:46 > > An: Kevin Fibich > > Cc: ocf...@li... > > Betreff: Re: [Ocf-linux-users] Geode AES Engine and ocf - not working? > > > > Jivin Kevin Fibich lays it down ... > > > Hi there! > > > > > > I am trying to use ocf-linux to get my geode aes engine up and running > > > for vpn encryption. After days of patching an recompiling on and on i > > > finally got everything working ... i thought. > > > > > > My kernel has ocf linux compiled in and geode_aes, cryptodev + > > > cryptosoft (for testing) compiled as modules. > > > My Openssl has the cryptodev patch and lists the cryptodev engine, but > > > if i encrypt something with and without cryptodev the performance is the > > > same. > > > > > > Maybe someone has an idea or already expirience something like this? > > > Did i forget something? > > > > Yes, some patches were posted to the list IIRC, or maybe not. > > > > Anyway, here are the bits ot get user-space acceleration for AES. > > You probably only need the ssl patch unless you are using cryptotest to > > test the speed, > > > > Cheers, > > Davidm > > > > -- > > David McCullough, dav...@se..., Ph:+61 734352815 > > Secure Computing - SnapGear http://www.uCdot.org http://www.snapgear.com > > > > -- > David McCullough, dav...@se..., Ph:+61 734352815 > Secure Computing - SnapGear http://www.uCdot.org http://www.snapgear.com > -- David McCullough, dav...@se..., Ph:+61 734352815 Secure Computing - SnapGear http://www.uCdot.org http://www.snapgear.com |
|
From: Kevin F. <ke...@wh...> - 2008-08-06 07:16:14
|
Hi!
I am loading geode_aes right after crypto_blkcipher and crypto_algapi ..
Do i understand right that geode_aes *and* cryptosoft ist needed to be loaded?
If i do i get this when running cryptotest -a aes :
Error allocating fallback algo cbc(aes)
BUG: unable to handle kernel NULL pointer dereference at 00000026
IP: [<de8daedd>] :cryptosoft:swcr_newsession+0x35c/0x5ca
*pde = 00000000
Oops: 0000 [#9]
Modules linked in: cryptosoft cryptodev(P) ocf(P) geode_aes crypto_blkcipher crypto_algapi [last unloaded: cryptosoft]
Pid: 2795, comm: cryptotest Tainted: P D (2.6.26 #5)
EIP: 0060:[<de8daedd>] EFLAGS: 00010246 CPU: 0
EIP is at swcr_newsession+0x35c/0x5ca [cryptosoft]
EAX: dd929760 EBX: fffffffe ECX: 00000004 EDX: 00000080
ESI: dd929740 EDI: 00000000 EBP: ddbf4420 ESP: dd937db0
DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 0068
Process cryptotest (pid: 2795, ti=dd936000 task=dd924a20 task.ti=dd936000)
Stack: dd937ecc dd937de8 00000005 00000008 de8dc820 ddbcf26c 00000286 00000001
de8c93dd dd937ecc dd937f50 00000004 00000004 ddbcf200 00000008 03000000
00000000 03000000 dd930260 de8debcb dd45c100 c030636a bb529c30 ddbda005
Call Trace:
[<de8c93dd>] crypto_newsession+0x191/0x248 [ocf]
[<de8debcb>] cryptodev_ioctl+0x6d8/0x12ec [cryptodev]
[<c030636a>] __nla_put+0x3/0x45
[<c015403b>] do_lookup+0x53/0x145
[<c015bd22>] dput+0x21/0xb8
[<c015571e>] __link_path_walk+0x8b0/0x9e1
[<c0136fd7>] get_page_from_freelist+0x2de/0x365
[<c0141296>] find_mergeable_anon_vma+0x92/0xa1
[<c013dd6c>] handle_mm_fault+0x1b1/0x43c
[<de8df7df>] cryptodev_unlocked_ioctl+0x0/0x17 [cryptodev]
[<de8df7eb>] cryptodev_unlocked_ioctl+0xc/0x17 [cryptodev]
[<c0157486>] vfs_ioctl+0x16/0x49
[<c015769c>] do_vfs_ioctl+0x1e3/0x1f6
[<c03547ff>] do_page_fault+0x266/0x584
[<c01576db>] sys_ioctl+0x2c/0x45
[<c0102fca>] syscall_call+0x7/0xb
[<c030636a>] __nla_put+0x3/0x45
=======================
Code: f7 f9 39 44 24 0c 72 ac 83 3d 00 c8 8d de 00 74 0b 68 95 b6 8d de e8 fd b4 83 e1 5e 8b 1c 24 8b 45 00 8b 53 04 8b 73 0c 8b 58 08 <8b> 43 28 8b 40 10 83 e0 0f 83 f8 04 74 04 0f 0b eb fe 8d 42 07
EIP: [<de8daedd>] swcr_newsession+0x35c/0x5ca [cryptosoft] SS:ESP 0068:dd937db0
---[ end trace 172cd4e6a9c6f493 ]---
-----Ursprüngliche Nachricht-----
Von: David McCullough [mailto:Dav...@se...]
Gesendet: Mittwoch, 6. August 2008 01:49
An: Kevin Fibich
Cc: ocf...@li...
Betreff: Re: [Ocf-linux-users] Geode AES Engine and ocf - not working?
Jivin Kevin Fibich lays it down ...
> Hi!
>
> Got a strange error from cryptotest -a aes -v
>
> CIOCGSESSION: Invalid argument
>
> I get this, no matter if cryptosoft or geode_aes is loaded ...
> If cryptodev is not loaded it tells me that there is no /dev/crypto (which is created by udev on module load)
>
> My lsmod when freshly booted:
>
> Module Size Used by
> geode_aes 5380 0
> cryptodev 11268 0
> crypto_blkcipher 14084 1 geode_aes
> crypto_algapi 11648 2 geode_aes,crypto_blkcipher
Are you loading cryptosoft after the geode modules ?
It needs to detect aes support in the kernel crypto in order to support
it.
> *Note that ocf is compiled directly into the kernel
>
> cryptotest output with cryptodev:
>
> crid = 3000000
> cipher aes keylen 16
> CIOCGSESSION: Invalid argument
Hmm, no idea at the moment. Hopefully someone with this running is
listening :-)
Cheers,
Davidm
> Without cryptodev:
>
> cryptotest: /dev/crypto: No such file or directory
>
> openssl speed aes with cryptodev:
>
> OpenSSL 0.9.8g 19 Oct 2007
> built on: Mon Aug 4 11:48:35 CEST 2008
> options:bn(64,32) md2(int) rc4(idx,int) des(ptr,risc1,16,long) aes(partial) idea(int) blowfish(idx)
> compiler: gcc -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DHAVE_CRYPTODEV -DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall -DOPENSSL_BN_ASM_PART_WORDS -DOPENSSL_IA32_SSE2 -DSHA1_ASM -DMD5_ASM -DRMD160_ASM -DAES_ASM
> available timing options: TIMES TIMEB HZ=100 [sysconf value]
> timing function used: times
> The 'numbers' are in 1000s of bytes per second processed.
> type 16 bytes 64 bytes 256 bytes 1024 bytes 2048 bytes
> aes-128 cbc 5227.73k 7176.36k 7990.44k 8201.90k 8227.50k
> aes-192 cbc 4687.34k 6225.54k 6809.60k 6961.83k 6980.27k
> aes-256 cbc 4260.90k 5485.61k 5930.41k 6048.09k 6062.08k
>
> without cryptodev:
>
> OpenSSL 0.9.8g 19 Oct 2007
> built on: Mon Aug 4 11:48:35 CEST 2008
> options:bn(64,32) md2(int) rc4(idx,int) des(ptr,risc1,16,long) aes(partial) idea(int) blowfish(idx)
> compiler: gcc -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DHAVE_CRYPTODEV -DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall -DOPENSSL_BN_ASM_PART_WORDS -DOPENSSL_IA32_SSE2 -DSHA1_ASM -DMD5_ASM -DRMD160_ASM -DAES_ASM
> available timing options: TIMES TIMEB HZ=100 [sysconf value]
> timing function used: times
> The 'numbers' are in 1000s of bytes per second processed.
> type 16 bytes 64 bytes 256 bytes 1024 bytes 2048 bytes
> aes-128 cbc 5280.08k 7228.65k 8008.62k 8230.91k 8263.68k
> aes-192 cbc 4726.69k 6244.37k 6821.89k 6982.66k 7004.84k
> aes-256 cbc 5019.08k 5731.31k 5964.29k 6029.31k 6036.82k
>
> Dmesg gives the following message:
>
> cryptodev: module license 'BSD' taints kernel.
>
> I really dont know what could be wrong ...
>
> Kernel is linux-2.6.26 patched with
>
> Aufs cvs + squashfs 3.3
>
> ocf-linux-26-20080704.patch and ocf-2.6.26.patch from this list.
>
> Openssl got the patch from ocf-linux-20080704.tar.gz
>
> I doublechecked everything i have in mind ... i really cant find any issue.
>
> -----Ursprüngliche Nachricht-----
> Von: David McCullough [mailto:Dav...@se...]
> Gesendet: Dienstag, 5. August 2008 12:54
> An: Kevin Fibich
> Cc: ocf...@li...
> Betreff: Re: [Ocf-linux-users] Geode AES Engine and ocf - not working?
>
>
> Jivin Kevin Fibich lays it down ...
> >
> >
> > Hi!
> >
> > First of all, thanks fort he fast answer ;-)
> > Is it possible that you just added the ssl aes192 patch to your answer?
> > I took a look into it and found just aes192 and arc four support patched into openssl cryptodev engine ...
>
> I'm having a bad day, AES was always in there, just recently RC4 and
> AES192 were added.
>
> Have a look at the mail list archives, several before you have got this
> working on the geode, it's just a matter of getting it all together
> correctly. If you can't find anything then send in:
>
> * output of lsmod (if you are running as modules)
> * output of "cryptotest -a aes" with cryptodev loaded and without
> cryptodev loaded.
> * output of "openssl speed -evp aes -elapsed" with cryptodev loaded
> and without.
>
> Note that openssl uses cryptodev by default if it detects it.
>
> Cheers,
> Davidm
>
> > -----Ursprüngliche Nachricht-----
> > Von: David McCullough [mailto:Dav...@se...]
> > Gesendet: Dienstag, 5. August 2008 01:46
> > An: Kevin Fibich
> > Cc: ocf...@li...
> > Betreff: Re: [Ocf-linux-users] Geode AES Engine and ocf - not working?
> >
> > Jivin Kevin Fibich lays it down ...
> > > Hi there!
> > >
> > > I am trying to use ocf-linux to get my geode aes engine up and running
> > > for vpn encryption. After days of patching an recompiling on and on i
> > > finally got everything working ... i thought.
> > >
> > > My kernel has ocf linux compiled in and geode_aes, cryptodev +
> > > cryptosoft (for testing) compiled as modules.
> > > My Openssl has the cryptodev patch and lists the cryptodev engine, but
> > > if i encrypt something with and without cryptodev the performance is the
> > > same.
> > >
> > > Maybe someone has an idea or already expirience something like this?
> > > Did i forget something?
> >
> > Yes, some patches were posted to the list IIRC, or maybe not.
> >
> > Anyway, here are the bits ot get user-space acceleration for AES.
> > You probably only need the ssl patch unless you are using cryptotest to
> > test the speed,
> >
> > Cheers,
> > Davidm
> >
> > --
> > David McCullough, dav...@se..., Ph:+61 734352815
> > Secure Computing - SnapGear http://www.uCdot.org http://www.snapgear.com
> >
>
> --
> David McCullough, dav...@se..., Ph:+61 734352815
> Secure Computing - SnapGear http://www.uCdot.org http://www.snapgear.com
>
--
David McCullough, dav...@se..., Ph:+61 734352815
Secure Computing - SnapGear http://www.uCdot.org http://www.snapgear.com
|