Speed problems with both system openssl and security/openssl-devel
Dimitry Andric
dim at FreeBSD.org
Thu Sep 13 08:52:24 UTC 2018
On 13 Sep 2018, at 01:46, Lev Serebryakov <lev at FreeBSD.org> wrote:
>
> I'm benchmarking new hardware (rather limited one, but still) which
> supports AES-NI (Celeron J3160).
>
> I'm comparing simple "openssl speed aes-256-cbc" and "openssl speed -evp
> aes-256-cbc" on FreeBSD 12-ALPHA4 (built by myself with all debug options
> turned off) and Debian Linux 9.5.0 booted from install DVD (without
> installation).
>
> Simple "openssl speed aes-256-cbc" shows same numbers both in
> single-threaded and multi-threaded mode (for all 4 cores). Linux is marginally faster,
> but it is in the margin of measurement error.
>
> But "openssl speed -evp aes-256-cbc" gives me very disappointing results.
> FreeBSD's openssl is WAY slower than Linux one. It is even slower than
> non-evp mode for small blocks.
>
> Here are results (As reported by openssl, with fractions dropped):
>
> Lin 18942 20637 21300 57967 58769 58769
> Free 18931 20591 21282 58342 58731 58779
> Lin-evp 97049 151466 183905 194385 197514 197727
> Free-evp 2838 10845 35362 81892 131264 137579
>
> Linux have openssl 1.1.0f, and I've tried both system /usr/bin/openssl (1.0.2p)
> and /usr/local/bin/openssl from security/openssl-devel port (1.1.0i), results are
> virtually the same. I have "ASM" and "SSE2" options enabled in port.
>
> What happens here? Why does FreeBSD's build of openssl use AES-NI so
> inefficient?
I can't reproduce your findings, at least not on a Core i7-4790K:
type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes
FreeBSD 93454 89077 117328 281016 285456
Ubuntu 93405 88892 114192 122346 120266
FreeBSD-evp 633283 688010 700775 701168 700669
Ubuntu-evp 623889 681075 697211 700505 698460
That was with base openssl 1.0.2p on FreeBSD 12-ALPHA5, and 1.1.0g on
Ubuntu 18.04.
-Dimitry
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 223 bytes
Desc: Message signed with OpenPGP
URL: <http://lists.freebsd.org/pipermail/freebsd-current/attachments/20180913/2ea24c68/attachment.sig>
More information about the freebsd-current
mailing list