recommended SSL-friendly crypto accelerator

[Jason Stone]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


> | last time I checked, the stats on the cheap soekris cards were way slower
> | than the output of "openssl speed" run on my system during normal load....
>
> where are you referencing your stats from?

Oh, sorry - I don't have one of these cards - I'm comparing the stats
published on the soekris website (eg, http://soekris.com/vpn1201.htm) with
the output of "openssl speed" on the box that I was considering putting
the card into.


eg, that pages says, "Encryption, DES, Triple-DES and RC4 at 70 to 188
Mbps"

so let's assume that it will do rc4 at 188Mbit/s = 24Mbyte/s.  now,
running openssl speed on this p4-2.4Ghz yields:

type         8 bytes     64 bytes    256 bytes   1024 bytes  8192 bytes
rc4        66834.42k    88726.02k    91202.39k    91817.64k  91742.21k

so we see that even at the smallest blocksize, openssl on this cpu is
encrypting at 67Mbyte/s, and, at very large blocksizes, 92Mbyte/s - this
is roughly three to four times faster than the hardware card.


so, assuming that I haven't completely misinterpretted here, my question
is, will either openssl or the kernel driver realize that the card is
slower here and do the crypto on my main cpu while the cpu is not loaded?


 -Jason

 --------------------------------------------------------------------------
 Freud himself was a bit of a cold fish, and one cannot avoid the suspicion
 that he was insufficiently fondled when he was an infant.
	-- Ashley Montagu
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (FreeBSD)
Comment: See https://private.idealab.com/public/jason/jason.gpg

iD8DBQFAgHMSswXMWWtptckRAkQYAKDsat2vO1jKX6+19PcXpyD5X3X/1gCeJIO0
wjRsYJ5/ql/NWiUh/EP/F4A=
=UBZ2
-----END PGP SIGNATURE-----