openssl speed performance

seb.arana at aj-form.com seb.arana at aj-form.com
Fri Oct 1 01:41:09 PDT 2004


hi everyone !
i've read some post here and i'm very impressed with the openssl speed 
results of one member here (called Alexander Portnoy).

i've done a "openssl speed" test (ie: localhost# openssl speed ) and 
here are the results :

OpenSSL 0.9.7d 17 Mar 2004
built on: Thu Sep  2 13:20:53 GMT 2004
options:bn(32,32) md2(int) rc4(ptr,int) des(ptr,risc1,16,long) 
aes(partial) idea(int) blowfish(idx)
compiler: cc -DOPENSSL_NO_KRB5 -O
available timing options: USE_TOD HZ=128 [sysconf value]
timing function used: getrusage
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 
bytes
md2               2208.94k     5022.69k     7395.43k     8387.66k 
8718.08k
mdc2              5608.23k     6746.76k     7067.26k     7186.59k 
7205.34k
md4              10464.94k    39171.28k   128675.70k   272563.86k 
382406.67k
md5              10965.38k    36964.69k   108454.14k   205642.28k 
281639.21k
hmac(md5)        15556.94k    52101.15k   136841.21k   230906.92k 
288899.00k
sha1              7982.98k    24374.08k    57023.14k    87457.63k 
103338.64k
rmd160            6693.06k    18581.64k    39065.54k    53598.86k 
60119.44k
rc4              74981.68k    81470.86k    82316.39k    82539.19k 
82581.40k
des cbc          36209.33k    38050.69k    38383.75k    38540.33k 
38476.71k
des ede3         14249.97k    14385.57k    14500.45k    14520.82k 
14517.76k
idea cbc         25050.45k    26717.50k    26971.48k    27178.96k 
27148.48k
rc2 cbc          21656.55k    22656.62k    22802.68k    22851.90k 
22806.19k
rc5-32/12 cbc    81936.85k    83839.69k    84596.13k    83844.66k 
85239.83k
blowfish cbc     75187.71k    78125.75k    77645.32k    78030.15k 
77801.55k
cast cbc         60307.98k    65169.68k    66580.80k    67096.56k 
65486.20k
aes-128 cbc      76232.69k    74555.25k    76131.09k    77019.20k 
75437.55k
aes-192 cbc      68742.33k    66846.01k    68282.29k    68608.32k 
67630.10k
aes-256 cbc      62000.02k    60375.83k    61263.03k    61193.77k 
60780.58k
                   sign    verify    sign/s verify/s
rsa  512 bits   0.0033s   0.0003s    302.4   3267.1
rsa 1024 bits   0.0192s   0.0010s     51.9   1000.2
rsa 2048 bits   0.1237s   0.0036s      8.1    276.5
rsa 4096 bits   0.8446s   0.0131s      1.2     76.1
                   sign    verify    sign/s verify/s
dsa  512 bits   0.0029s   0.0035s    344.4    285.3
dsa 1024 bits   0.0099s   0.0122s    100.9     81.9
dsa 2048 bits   0.0351s   0.0444s     28.5     22.5


i can't do better than that and when i see the Alexander's post, i'm 
very surprise....

i've compiled the kernel with makeoptions COPTFLAGS="-O2 -pipe 
-funroll-loops -march=pentium4 -mfpmath=sse" #optimisation code

here is the full kernel config :

##############################################
# options pour la compilation ################
##############################################
machine i386                    #type de machine : pc compatible
makeoptions COPTFLAGS="-O2 -pipe -funroll-loops -march=pentium4 
-mfpmath=sse" #optimisation code
cpu             I686_CPU        #noyau pour 686
ident           DRAGON          #nom du noyeau
device          apic            # I/O apic, HTT
options         MPTABLE_FORCE_HTT       # Enable HTT CPUs with the MP Table
options         NO_MIXED_MODE   # Disable use of mixed mode
options         CPU_ENABLE_SSE  #support des instructions SSE et MMX
options         CPU_UPGRADE_HW_CACHE    #flush des instructions non utilises
options         PERFMON         #utilitaire de monitoring de performan

##############################################
# system : SCHEDULER #########################
##############################################
options         SCHED_4BSD      #scheduler de BSD4

##############################################
#FileSystem ##################################
##############################################
options FFS             #Berkeley Fast Filesystem
options SOFTUPDATES     #Enable FFS soft updates support
options UFS_ACL         #Support for access control lists
options UFS_DIRHASH     #Improve performance on big directories
options MD_ROOT         #MD is a potential root device
options CD9660          #ISO 9660 Filesystem
options PROCFS          #Process filesystem (requires PSEUDOFS)
options PSEUDOFS        #Pseudo-filesystem framework
options SYSVMSG         #SYSV-style message queues
options SYSVSEM         #SYSV-style semaphores
options COMPAT_43       #Compatible with BSD 4.3 [KEEP THIS!]
options COMPAT_FREEBSD4 #Compatible with FreeBSD4

#########################################
# FIREWALL ##############################
#########################################
options         IPFILTER                #ipfilter support
options         IPFILTER_LOG            #ipfilter logging
options         IPFILTER_DEFAULT_BLOCK  #block all packets by default
options         PFIL_HOOKS              #required by IPFILTER

##############################################
# MISC DEVICE ################################
##############################################
##############support bus
device  isa
device  eisa
device  pci
##############support virgule flottante - obligatoire
device  npx
##############Add suspend/resume support for the i8254.
device  pmtimer
##############Misc
device  pty             # Pseudo-ttys (telnet etc)
device  md              # Memory "disks"
##############KEYBOARD & MOUSE device
device  atkbdc          # AT keyboard controller
device  atkbd           # AT keyboard
##############video device
device  sc              # syscons is the default console driver, 
resembling an SCO console
device  splash  # Splash screen and screen saver support
device  vga             # VGA video card driver
device  agp             # support several AGP chipsets
##############parralel device
device  ppc
device  ppbus           # Parallel port bus (required)
##############COM device
device  sio             # 8250, 16[45]50 based serial ports
# support bus ATA,ATAPI et les peripheriques
device  ata
device  ataraid         # ATA raid
device  atadisk         # ATA disk drives
device  atapicd         # ATAPI CDROM drives
device  atapifd         # ATAPI floppy drives
options         ATA_STATIC_ID   #Static device numbering
# Floppy drives
device  fdc

##############################################
# reseau : INTERFACES #########################
##############################################
device  loop            #loopback
device  random          # Entropy device
device  ether           #Ethernet Generic
device  bpf             #Berkeley packet Filter
device  sk

##############################################
# reseau : SUPPORT ############################
##############################################
options INET                    #support IPV4
options IPSEC                   #ip security
options IPSEC_ESP               #IP security (crypto; define w/ IPSEC)
options IPSTEALTH               #forwarding transparent
options RANDOM_IP_ID            #protection contre hack
options SC_DISABLE_DDBKEY       #desactive sequance clavier hook
options SC_DISABLE_REBOOT       #
options SC_NO_HISTORY

###############################################
# INTERFACES RESEAU PCI #######################
###############################################
device  miibus                  # MII bus support

##############################################
# POSIX P1003.1B (1993 posix) ################
##############################################
options _KPOSIX_PRIORITY_SCHEDULING     #real time extension
options P1003_1B_SEMAPHORES

##############################################
# divers #####################################
##############################################
maxusers        0       #le system calcul le nb max de process au boot
options         DEVICE_POLLING  #optimise les bus (chargement des 
pilotes dyna)
options         HZ=2000         #polling reseau/cpu

#########################################
# CRYPTO SUBSYSTEM ######################
#########################################
device          crypto          # core crypto support
device          rndtest         # FIPS 140-2 entropy tester

###### MISC
options         PANIC_REBOOT_WAIT_TIME=16


the GCC wich built the kernel is
gcc (GCC) 3.4.2 20040806 (prerelease) [FreeBSD]
Copyright (C) 2004 Free Software Foundation, Inc.

the sources of kernel are RELENG_5_2 (p10 applied)

someone know why my computer (p4 2.4Ghz, 1Go, 120Go SATA RAID1 on 
promise chipset, MB asus p4c800, FreeBSD 5.2.1R patched) cant perf any 
more, or better than the Alexander results ?

Thanks for ideas :)
G'Day !
Seb.



More information about the freebsd-performance mailing list