openssl speed performance
seb.arana at aj-form.com
seb.arana at aj-form.com
Fri Oct 1 01:41:09 PDT 2004
hi everyone !
i've read some post here and i'm very impressed with the openssl speed
results of one member here (called Alexander Portnoy).
i've done a "openssl speed" test (ie: localhost# openssl speed ) and
here are the results :
OpenSSL 0.9.7d 17 Mar 2004
built on: Thu Sep 2 13:20:53 GMT 2004
options:bn(32,32) md2(int) rc4(ptr,int) des(ptr,risc1,16,long)
aes(partial) idea(int) blowfish(idx)
compiler: cc -DOPENSSL_NO_KRB5 -O
available timing options: USE_TOD HZ=128 [sysconf value]
timing function used: getrusage
The 'numbers' are in 1000s of bytes per second processed.
type 16 bytes 64 bytes 256 bytes 1024 bytes 8192
bytes
md2 2208.94k 5022.69k 7395.43k 8387.66k
8718.08k
mdc2 5608.23k 6746.76k 7067.26k 7186.59k
7205.34k
md4 10464.94k 39171.28k 128675.70k 272563.86k
382406.67k
md5 10965.38k 36964.69k 108454.14k 205642.28k
281639.21k
hmac(md5) 15556.94k 52101.15k 136841.21k 230906.92k
288899.00k
sha1 7982.98k 24374.08k 57023.14k 87457.63k
103338.64k
rmd160 6693.06k 18581.64k 39065.54k 53598.86k
60119.44k
rc4 74981.68k 81470.86k 82316.39k 82539.19k
82581.40k
des cbc 36209.33k 38050.69k 38383.75k 38540.33k
38476.71k
des ede3 14249.97k 14385.57k 14500.45k 14520.82k
14517.76k
idea cbc 25050.45k 26717.50k 26971.48k 27178.96k
27148.48k
rc2 cbc 21656.55k 22656.62k 22802.68k 22851.90k
22806.19k
rc5-32/12 cbc 81936.85k 83839.69k 84596.13k 83844.66k
85239.83k
blowfish cbc 75187.71k 78125.75k 77645.32k 78030.15k
77801.55k
cast cbc 60307.98k 65169.68k 66580.80k 67096.56k
65486.20k
aes-128 cbc 76232.69k 74555.25k 76131.09k 77019.20k
75437.55k
aes-192 cbc 68742.33k 66846.01k 68282.29k 68608.32k
67630.10k
aes-256 cbc 62000.02k 60375.83k 61263.03k 61193.77k
60780.58k
sign verify sign/s verify/s
rsa 512 bits 0.0033s 0.0003s 302.4 3267.1
rsa 1024 bits 0.0192s 0.0010s 51.9 1000.2
rsa 2048 bits 0.1237s 0.0036s 8.1 276.5
rsa 4096 bits 0.8446s 0.0131s 1.2 76.1
sign verify sign/s verify/s
dsa 512 bits 0.0029s 0.0035s 344.4 285.3
dsa 1024 bits 0.0099s 0.0122s 100.9 81.9
dsa 2048 bits 0.0351s 0.0444s 28.5 22.5
i can't do better than that and when i see the Alexander's post, i'm
very surprise....
i've compiled the kernel with makeoptions COPTFLAGS="-O2 -pipe
-funroll-loops -march=pentium4 -mfpmath=sse" #optimisation code
here is the full kernel config :
##############################################
# options pour la compilation ################
##############################################
machine i386 #type de machine : pc compatible
makeoptions COPTFLAGS="-O2 -pipe -funroll-loops -march=pentium4
-mfpmath=sse" #optimisation code
cpu I686_CPU #noyau pour 686
ident DRAGON #nom du noyeau
device apic # I/O apic, HTT
options MPTABLE_FORCE_HTT # Enable HTT CPUs with the MP Table
options NO_MIXED_MODE # Disable use of mixed mode
options CPU_ENABLE_SSE #support des instructions SSE et MMX
options CPU_UPGRADE_HW_CACHE #flush des instructions non utilises
options PERFMON #utilitaire de monitoring de performan
##############################################
# system : SCHEDULER #########################
##############################################
options SCHED_4BSD #scheduler de BSD4
##############################################
#FileSystem ##################################
##############################################
options FFS #Berkeley Fast Filesystem
options SOFTUPDATES #Enable FFS soft updates support
options UFS_ACL #Support for access control lists
options UFS_DIRHASH #Improve performance on big directories
options MD_ROOT #MD is a potential root device
options CD9660 #ISO 9660 Filesystem
options PROCFS #Process filesystem (requires PSEUDOFS)
options PSEUDOFS #Pseudo-filesystem framework
options SYSVMSG #SYSV-style message queues
options SYSVSEM #SYSV-style semaphores
options COMPAT_43 #Compatible with BSD 4.3 [KEEP THIS!]
options COMPAT_FREEBSD4 #Compatible with FreeBSD4
#########################################
# FIREWALL ##############################
#########################################
options IPFILTER #ipfilter support
options IPFILTER_LOG #ipfilter logging
options IPFILTER_DEFAULT_BLOCK #block all packets by default
options PFIL_HOOKS #required by IPFILTER
##############################################
# MISC DEVICE ################################
##############################################
##############support bus
device isa
device eisa
device pci
##############support virgule flottante - obligatoire
device npx
##############Add suspend/resume support for the i8254.
device pmtimer
##############Misc
device pty # Pseudo-ttys (telnet etc)
device md # Memory "disks"
##############KEYBOARD & MOUSE device
device atkbdc # AT keyboard controller
device atkbd # AT keyboard
##############video device
device sc # syscons is the default console driver,
resembling an SCO console
device splash # Splash screen and screen saver support
device vga # VGA video card driver
device agp # support several AGP chipsets
##############parralel device
device ppc
device ppbus # Parallel port bus (required)
##############COM device
device sio # 8250, 16[45]50 based serial ports
# support bus ATA,ATAPI et les peripheriques
device ata
device ataraid # ATA raid
device atadisk # ATA disk drives
device atapicd # ATAPI CDROM drives
device atapifd # ATAPI floppy drives
options ATA_STATIC_ID #Static device numbering
# Floppy drives
device fdc
##############################################
# reseau : INTERFACES #########################
##############################################
device loop #loopback
device random # Entropy device
device ether #Ethernet Generic
device bpf #Berkeley packet Filter
device sk
##############################################
# reseau : SUPPORT ############################
##############################################
options INET #support IPV4
options IPSEC #ip security
options IPSEC_ESP #IP security (crypto; define w/ IPSEC)
options IPSTEALTH #forwarding transparent
options RANDOM_IP_ID #protection contre hack
options SC_DISABLE_DDBKEY #desactive sequance clavier hook
options SC_DISABLE_REBOOT #
options SC_NO_HISTORY
###############################################
# INTERFACES RESEAU PCI #######################
###############################################
device miibus # MII bus support
##############################################
# POSIX P1003.1B (1993 posix) ################
##############################################
options _KPOSIX_PRIORITY_SCHEDULING #real time extension
options P1003_1B_SEMAPHORES
##############################################
# divers #####################################
##############################################
maxusers 0 #le system calcul le nb max de process au boot
options DEVICE_POLLING #optimise les bus (chargement des
pilotes dyna)
options HZ=2000 #polling reseau/cpu
#########################################
# CRYPTO SUBSYSTEM ######################
#########################################
device crypto # core crypto support
device rndtest # FIPS 140-2 entropy tester
###### MISC
options PANIC_REBOOT_WAIT_TIME=16
the GCC wich built the kernel is
gcc (GCC) 3.4.2 20040806 (prerelease) [FreeBSD]
Copyright (C) 2004 Free Software Foundation, Inc.
the sources of kernel are RELENG_5_2 (p10 applied)
someone know why my computer (p4 2.4Ghz, 1Go, 120Go SATA RAID1 on
promise chipset, MB asus p4c800, FreeBSD 5.2.1R patched) cant perf any
more, or better than the Alexander results ?
Thanks for ideas :)
G'Day !
Seb.
More information about the freebsd-performance
mailing list