cryptodev HW (aesni) vs software

[Ivan Klymenko]

Hello everybody.
What's happening?

root at nonamehost:/ # openssl speed -evp aes-128-cbc -elapsed -engine cryptodev
engine "cryptodev" set.
You have chosen to measure elapsed time instead of user CPU time.
Doing aes-128-cbc for 3s on 16 size blocks: 94143620 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 64 size blocks: 25440888 aes-128-cbc's in 3.01s
Doing aes-128-cbc for 3s on 256 size blocks: 6442164 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 1024 size blocks: 1626351 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 8192 size blocks: 202870 aes-128-cbc's in 3.01s
OpenSSL 1.0.2d-freebsd 9 Jul 2015
built on: date not available
options:bn(64,64) rc4(16x,int) des(idx,cisc,16,int) aes(partial) idea(int) blowfish(idx)
compiler: clang
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-128-cbc     502099.31k   541329.23k   549731.33k   555127.81k   552531.46k
root at nonamehost:/ # openssl engine -c -t
(cryptodev) BSD cryptodev engine
 [RSA, DSA, DH]
     [ available ]
(dynamic) Dynamic engine loading support
     [ unavailable ]
root at nonamehost:/ # kldload aesni
root at nonamehost:/ # openssl engine -c -t
(cryptodev) BSD cryptodev engine
 [RSA, DSA, DH, AES-128-CBC, AES-192-CBC, AES-256-CBC]
     [ available ]
(dynamic) Dynamic engine loading support
     [ unavailable ]
root at nonamehost:/ # openssl speed -evp aes-128-cbc -elapsed -engine cryptodev
engine "cryptodev" set.
You have chosen to measure elapsed time instead of user CPU time.
Doing aes-128-cbc for 3s on 16 size blocks: 1645919 aes-128-cbc's in 3.01s
Doing aes-128-cbc for 3s on 64 size blocks: 1675783 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 256 size blocks: 1398129 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 1024 size blocks: 824381 aes-128-cbc's in 3.01s
Doing aes-128-cbc for 3s on 8192 size blocks: 173487 aes-128-cbc's in 3.00s
OpenSSL 1.0.2d-freebsd 9 Jul 2015
built on: date not available
options:bn(64,64) rc4(16x,int) des(idx,cisc,16,int) aes(partial) idea(int) blowfish(idx)
compiler: clang
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-128-cbc       8755.43k    35750.04k   119307.01k   280657.83k   473735.17k
root at nonamehost:/ #

Thanks!