Atom C2758 - loading aesni(4) reduces performance
John-Mark Gurney
jmg at funkthat.com
Mon May 25 05:22:00 UTC 2015
Kevin Day wrote this message on Sun, May 24, 2015 at 23:15 -0500:
> > On May 24, 2015, at 5:44 PM, John-Mark Gurney <jmg at funkthat.com> wrote:
> >
> > If you have cryptodev loaded, this is to be expected as OpenSSL will
> > use /dev/crypto instead of the AES-NI instructions.. Just don't load
> > cryptodev and you'll be fine..
>
> So to make sure I???m understanding??? openssl has native AES-NI support, and it also can use /dev/crypto. It???s preferring /dev/crypto, but /dev/crypto has much higher overhead?
Correct... At least OpenSSL 1.0.1 that started shipping w/ 10.0 has
native AES-NI support... Pre-10.0 doesn't have it...
--
John-Mark Gurney Voice: +1 415 225 5579
"All that I will do, has been done, All that I have, has not."
More information about the freebsd-security
mailing list