[openssl-dev] arch (ARM) capabilities

Hubert Kario hkario at redhat.com
Mon Jun 27 14:11:57 UTC 2016


On Monday 27 June 2016 12:37:39 Catalin Vasile wrote:
> Hi,
> 
> Is there an option when making an app that uses OpenSSL
> to verify that is uses Crypto Extensions (like checking
> a flag or something like that) ?

With x86_64, ciphers like aes-128-cbc are much faster with
AES-NI, so a simple benchmark:

openssl speed aes-128-cbc
openssl speed -evp aes-128-cbc

will tell you if the code uses hardware acceleration, as it's
only the EVP that is accelerated.

But when I've tested it on AArch64 with openssl-1.1.0-pre5
and current master
(./configure no-shared no-engine)
I'm getting 100524.03k vs 52172.12k/s in favour of the non-EVP
version.

Is that really expected?

With 1.0.1 and 1.0.2 I'm getting around 100000k/s with and without
EVP, so that looks like a regression to me.
-- 
Regards,
Hubert Kario
Senior Quality Engineer, QE BaseOS Security team
Web: www.cz.redhat.com
Red Hat Czech s.r.o., Purkyňova 99/71, 612 45, Brno, Czech Republic
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part.
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20160627/60ea43fd/attachment.sig>


More information about the openssl-dev mailing list