[openssl-dev] arch (ARM) capabilities

[Catalin Vasile]

I want something more programmatic, more general.
I want to deliver a piece of software that will run on ARM architectures and will issue a warning or something like that if the user does not have an OpenSSL library set to work with ARM Crypto Extension.



From: Hubert Kario <hkario at redhat.com>
Sent: Monday, June 27, 2016 5:11 PM
To: openssl-dev at openssl.org
Cc: Catalin Vasile
Subject: Re: [openssl-dev] arch (ARM) capabilities
    
On Monday 27 June 2016 12:37:39 Catalin Vasile wrote:
> Hi,
> 
> Is there an option when making an app that uses OpenSSL
> to verify that is uses Crypto Extensions (like checking
> a flag or something like that) ?

With x86_64, ciphers like aes-128-cbc are much faster with
AES-NI, so a simple benchmark:

openssl speed aes-128-cbc
openssl speed -evp aes-128-cbc

will tell you if the code uses hardware acceleration, as it's
only the EVP that is accelerated.

But when I've tested it on AArch64 with openssl-1.1.0-pre5
and current master
(./configure no-shared no-engine)
I'm getting 100524.03k vs 52172.12k/s in favour of the non-EVP
version.

Is that really expected?

With 1.0.1 and 1.0.2 I'm getting around 100000k/s with and without
EVP, so that looks like a regression to me.
-- 
Regards,
Hubert Kario
Senior Quality Engineer, QE BaseOS Security team
Web: www.cz.redhat.com



The world's open source leader
www.cz.redhat.com
Red Hat is the world’s leading provider of open source solutions, using a community-powered approach to provide reliable and high-performing cloud, virtualization, storage, Linux, and middleware technologies. Red Hat also offers award-winning support, training, and consulting services. Red Hat is an S&P 500 company with more than 80 offices spanning the globe, empowering its customers’ businesses.

Red Hat Czech s.r.o., Purkyňova 99/71, 612 45, Brno, Czech Republic