[Pkg-openssl-devel] Bug#368476: openssl: please provide padlock extensions for VIA processors on i386 builds

[Pierre Habouzit]

Package: openssl
Version: 0.9.8b-2
Severity: normal

  VIA C6/C7 CPUs have a padlock extension that provides hardware support
for AES encryption (and also for SHA hashes in C7 processor [1]).

  openssl 0.9.8 supports padlock engine, but for a reason I'm not sure
to understand (the configure system of openssl is a bit rough for me to
find the answer at the first glance), it's not compiled in debian:

[madcoder ares] openssl engine padlock
19047:error:25066067:DSO support routines:DLFCN_LOAD:could not load the shared
library:dso_dlfcn.c:162:filename(/usr/lib/ssl/engines/libpadlock.so): /usr/lib/ssl/engines/libpadlock.so: cannot open shared object file: No such file or directory
19047:error:25070067:DSO support routines:DSO_load:could not load the shared library:dso_lib.c:244: 19047:error:260B6084:engine routines:DYNAMIC_LOAD:dso not
found:eng_dyn.c:450: 19047:error:2606A074:engine routines:ENGINE_by_id:no such engine:eng_list.c:415:id=padlock

  whereas on that machine it should have answered something like:

$ openssl engine padlock
(padlock) VIA PadLock (no-RNG, no-ACE)

  as this extension provides huge performance gain on VIA motherboards,
that are often used as routers to support VPN and other SSL-based
cryptographic services, I've chose the severity 'normal'.


TIA

  [1] http://www.logix.cz/michal/doc/article.xp/padlock-en

-- 
·O·  Pierre Habouzit
··O                                                madcoder at debian.org
OOO                                                http://www.madism.org