Xeon Processors with AES instructions and geli encryption

[Andrew Thompson]

FYI, there is a bug in 8.2 for 256b keys and was fixed in 8.2-stable.
You may want to apply the fix if it causes you issues.

http://www.FreeBSD.org/cgi/query-pr.cgi?pr=155118


Andrew

On 8 March 2012 04:59, Karl Denninger <karl at denninger.net> wrote:
> Thanks; the machines in question are on 8.2, so this sounds pretty good.
>
> On 3/7/2012 9:55 AM, Ian Lepore wrote:
>> On Wed, 2012-03-07 at 09:09 -0600, Karl Denninger wrote:
>>> Does the crypto(9) framework recognize and use these instructions?
>>> Looks like the Windmere-series Xeons will drop into my system boards; I
>>> gain two cores per CPU at the same time, so I'll go from an 8-way SMP
>>> system to a 12-way one.
>>>
>>> I am considering spending the money to upgrade a couple of servers here
>>> that run geli-encrypted disks, as during heavy I/O they spend a LOT of
>>> their CPU time on the disk encryption.  The differences I see in the use
>>> of TrueCrypt on Windows machines that have AES instructions .vs. those
>>> that do not are very significant and I'm curious if this carries over to
>>> FreeBSD.
>>>
>>> Thanks in advance!
>>>
>> It looks like it does as of 8.2 when the aesni driver was added.
>>
>> -- Ian
>>
>>
>> _______________________________________________
>> freebsd-stable at freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-stable
>> To unsubscribe, send any mail to "freebsd-stable-unsubscribe at freebsd.org"
>>
>>
>> %SPAMBLOCK-SYS: Matched [@freebsd.org+], message ok
>
> --
> -- Karl Denninger
> /The Market Ticker ®/ <http://market-ticker.org>
> Cuda Systems LLC
> _______________________________________________
> freebsd-stable at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-stable
> To unsubscribe, send any mail to "freebsd-stable-unsubscribe at freebsd.org"