Mike Tancsa wrote this message on Fri, Aug 23, 2013 at 14:19 -0400: > On 8/23/2013 2:05 PM, John-Mark Gurney wrote: > >> Speeding up userland AES is very interesting to me for a couple of apps. > >> If there is a proper way I should test on RELENG_9, please let me know > >> as I am few boxes that I would be happy to test/deploy on. > > > > My patch would only effect userland applications that use /dev/crypto... > > > > If they do their own AES-NI work, then there isn't any improvement... > > For me its ssh which I think does, no ? It looks like it uses OpenSSL for it's crypto, not /dev/crypto... Also, my work was done improving AES-XTS which isn't used by OpenSSH... OpenSSH looks like it uses either AES-GCM or AES-CTR, neither of which are supported by /dev/crypto... My gcc patch does include PCLMULQDQ support, which will be helpful for improving the performance of AES-GCM, and it looks like OpenSSL 1.0.1 has support, which is in HEAD, not RELENG_9 yet... So, if you want better ssh performance, install OpenSSL 1.0.1 and compile OpenSSH against it... -- John-Mark Gurney Voice: +1 415 225 5579 "All that I will do, has been done, All that I have, has not."Received on Fri Aug 23 2013 - 16:52:43 UTC
This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:40:40 UTC