GELI encryption - CPU requirements?

[Michael Jung]

FWIW: 

You need to use the "-multi <num cores>" switch for multi-core/multi-processors

#openssl speed aes
CPU: Dual-Core AMD Opteron(tm) Processor 2216 (2394.02-MHz 686-class CPU)
FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
 cpu0 (BSP): APIC ID:  0
 cpu1 (AP): APIC ID:  1
 cpu2 (AP): APIC ID:  2
 cpu3 (AP): APIC ID:  3
7.0-RELEASE

type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-128 cbc      51067.07k    51552.36k    52142.46k    52158.35k    52302.93k
aes-192 cbc      44284.34k    45152.29k    45648.03k    45653.66k    45784.30k
aes-256 cbc      39358.18k    39717.28k    40087.25k    40117.40k    40196.85k

Same machine with multi switch

#openssl speed aes -multi 4
aes-128 cbc     204173.66k   205888.69k   208489.35k   208569.53k   209142.85k
aes-192 cbc     176980.36k   180404.81k   182537.84k   182469.91k   183064.72k
aes-256 cbc     157313.97k   158619.06k   160317.78k   160399.19k   160746.01k

--mikej

-----Original Message-----
From: owner-freebsd-geom at freebsd.org [mailto:owner-freebsd-geom at freebsd.org] On Behalf Of Dan Naumov
Sent: Wednesday, May 27, 2009 4:41 PM
To: freebsd-geom at freebsd.org
Subject: Re: Re: GELI encryption - CPU requirements?

Wow, so on a dual core Atom, I would essentially be bottlenecked by my
CPU at 18 MB/s throughput? I guess that puts GELI encryption
completely out of the question and I need to look into some other
solution :(


- Dan Naumov



> For reference, here're the values taken on a dual core Atom:
>
> type             16 bytes     64 bytes    256 bytes   1024 bytes   8192
> bytes
> aes-128 cbc      17947.16k    18502.91k    18703.91k    18271.91k
> 18955.39k
>
> aes-192 cbc      16404.93k    15966.46k    16615.41k    16115.26k
> 16466.56k
>
> aes-256 cbc      13711.70k    14016.79k    14342.35k    14109.98k
> 14738.16k
>
>
> FreeBSD dardanos 7.2-STABLE FreeBSD 7.2-STABLE #10 r192673: Sun May 24
> 10:22:05 CEST 2009
>
> CPU: Intel(R) Atom(TM) CPU  330   @ 1.60GHz (1618.44-MHz 686-class CPU)
>  Origin = "GenuineIntel"  Id = 0x106c2  Stepping = 2
>
> Features=0xbfe9fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE>
>  Features2=0x40e31d<SSE3,DTES64,MON,DS_CPL,TM2,SSSE3,CX16,xTPR,PDCM,<b22>>
>  AMD Features=0x20100000<NX,LM>
>  AMD Features2=0x1<LAHF>
>  Cores per package: 2
>  Logical CPUs per core: 2
> real memory  = 2137391104 (2038 MB)
> avail memory = 2077528064 (1981 MB)
> ACPI APIC Table: <INTEL  D945GLF2>
> FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
>  cpu0 (BSP): APIC ID:  0
>  cpu1 (AP/HT): APIC ID:  1
>  cpu2 (AP): APIC ID:  2
>  cpu3 (AP/HT): APIC ID:  3
> ioapic0: Changing APIC ID to 2
> ioapic0 <Version 2.0> irqs 0-23 on motherboard
> kbd1 at kbdmux0
> cryptosoft0: <software crypto> on motherboard
_______________________________________________
freebsd-geom at freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-geom
To unsubscribe, send any mail to "freebsd-geom-unsubscribe at freebsd.org"

CONFIDENTIALITY NOTE: This message is intended only for the use
of the individual or entity to whom it is addressed and may contain 
information that is privileged, confidential, and exempt from 
disclosure under applicable law. If the reader of this message is 
not the intended recipient, you are hereby notified that any 
dissemination, distribution or copying of this communication 
is strictly prohibited. If you have received this transmission 
in error, please notify us by telephone at (502) 212-4001 or 
notify us at PAI , Dept. 99, 11857 Commonwealth Drive, 
Louisville, KY  40299.  Thank you.