always load aesni or load it when cpu supports it

[Poul-Henning Kamp]

In message <20131021184310.GZ56872 at funkthat.com>, John-Mark Gurney writes:
>Poul-Henning Kamp wrote this message on Mon, Oct 21, 2013 at 18:32 +0000:

>Also depends upon the crypto mode you are using...  If you're using
>CBC encrypt, then you'd need a very fancy accelerator to out perform
>a CPU, but in other modes like XTS or CTR, an accelerator can/will out
>perform the CPU...

Only for very large requests that can amortize the considerable
setup overhead.

Either way, we do *not* want the heuristics to guess this spread out
over every and all modules which need crypto services.

-- 
Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
phk at FreeBSD.ORG         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    
Never attribute to malice what can adequately be explained by incompetence.