[openssl-dev] arch (ARM) capabilities

[Hubert Kario]

On Monday 27 June 2016 17:20:39 Andy Polyakov wrote:
> >> Is there an option when making an app that uses OpenSSL to verify
> >> that is uses Crypto Extensions (like checking a flag or something
> >> like that) ?
> > 
> > With x86_64, ciphers like aes-128-cbc are much faster with AES-NI,
> > so a simple benchmark:
> > 
> > openssl speed aes-128-cbc openssl speed -evp aes-128-cbc
> > 
> > will tell you if the code uses hardware acceleration, as it's only
> > the EVP that is accelerated.
> > 
> > But when I've tested it on AArch64 with openssl-1.1.0-pre5 and
> > current master (./configure no-shared no-engine) I'm getting
> > 100524.03k vs 52172.12k/s in favour of the non-EVP version.
> > 
> > Is that really expected?
> 
> Depends on your system. Not all AArch64 processors were born equal,
> some have crypto extensions, some don't, some have mighty pipelines,
> some don't. The presented numbers suggest that you ended up on APM
> X-Gene processor which doesn't.

yes, it is an X-Gene, though I don't know which exact one

The product briefs I could find, say that X-Genes do support cryptograpic
extensions:
https://myapm.apm.com/technical_documents/download/apm883208-product-brief1

-- 
Regards,
Hubert Kario
Senior Quality Engineer, QE BaseOS Security team
Web: www.cz.redhat.com
Red Hat Czech s.r.o., Purkyňova 99/71, 612 45, Brno, Czech Republic
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part.
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20160628/ecebc20d/attachment.sig>