[openssl-dev] arch (ARM) capabilities

[Hubert Kario]

On Tuesday 28 June 2016 14:35:52 Andy Polyakov wrote:
> >>> But when I've tested it on AArch64 with openssl-1.1.0-pre5 and
> >>> current master (./configure no-shared no-engine) I'm getting
> >>> 100524.03k vs 52172.12k/s in favour of the non-EVP version.
> >>>
> >>> Is that really expected?
> >>
> >> Depends on your system. Not all AArch64 processors were born equal,
> >> some have crypto extensions, some don't, some have mighty pipelines,
> >> some don't. The presented numbers suggest that you ended up on APM
> >> X-Gene processor which doesn't.
> > 
> > yes, it is an X-Gene, though I don't know which exact one
> > 
> > The product briefs I could find, say that X-Genes do support cryptograpic
> > extensions:
> > https://myapm.apm.com/technical_documents/download/apm883208-product-brief1
> 
> I says "APM883208-X1 *can* deliver advanced security capabilities with
> the *optional* security engine." Mention of "engine" and then algorithm
> list suggests that it's kind of embedded peripheral, which would appear
> to user-land as device. While what we are talking about here is AES-NI
> equivalent for ARMv8, i.e. ARM *instruction* set extension directly
> accessible to user-land. Availability of this extension is normally
> reflected in Features: in /proc/cpuinfo.

ah, yes, the X-Gene 1 product brief says that the SHA-512 *can* be accelerated
which is not part of the ARM cryptographic extensions

it's the X-Gene 2 that says that the optional ARM v8 cryptographic instructions
are supported:
https://myapm.apm.com/technical_documents/download/apm883408-x2-product-brief

my mistake

since I don't see any "aes" or "sha" in /proc/cpuinfo, it means that I'm probably
running the first not the second generation X-Gene

thanks for clarification!
-- 
Regards,
Hubert Kario
Senior Quality Engineer, QE BaseOS Security team
Web: www.cz.redhat.com
Red Hat Czech s.r.o., Purkyňova 99/71, 612 45, Brno, Czech Republic
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part.
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20160628/4004a8df/attachment.sig>