[Pkg-openssl-devel] Bug#607914: Bug#607914: please enable padlock engine for 1.0.0 version of openssl

[JM]

I would like to confirm that openssl.cnf provided by Kurt Roeckx
enables padlock support.

With the modified openssl.cnf 'openssl speed -evp aes-128-cbc' gives a
speed-up of over 40x (!) for 8192 blocks.

I have also verified that the padlock engine is being used by default
by applications taking advantage of openssl with a simple scp test.
There is a speed-up of about 2.5x.

I am willing to perform any additional testing if necessary.

Regards,
Jan

# default config
$openssl speed -evp aes-128-cbc
Doing aes-128 cbc for 3s on 16 size blocks: 1016865 aes-128 cbc's in 2.91s
Doing aes-128 cbc for 3s on 64 size blocks: 270252 aes-128 cbc's in 2.88s
Doing aes-128 cbc for 3s on 256 size blocks: 68557 aes-128 cbc's in 2.88s
Doing aes-128 cbc for 3s on 1024 size blocks: 34145 aes-128 cbc's in 2.87s
Doing aes-128 cbc for 3s on 8192 size blocks: 3322 aes-128 cbc's in 2.20s
OpenSSL 1.0.0g 18 Jan 2012
built on: Wed Jan 18 21:31:30 UTC 2012
options:bn(64,32) rc4(4x,int) des(ptr,risc1,16,long) aes(partial) blowfish(idx)
compiler: gcc -fPIC -DOPENSSL_PIC -DZLIB -DOPENSSL_THREADS
-D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTERMIO -O3
-march=i686 -Wa,--noexecstack -g -Wall -DOPENSSL_BN_ASM_PART_WORDS
-DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM
-DSHA512_ASM -DMD5_ASM -DRMD160_ASM -DAES_ASM -DWHIRLPOOL_ASM
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-128 cbc       5591.01k     6005.60k     6093.96k    12182.75k    12369.92k

# new config
$ openssl speed -evp aes-128-cbc
Doing aes-128-cbc for 3s on 16 size blocks: 7762362 aes-128-cbc's in 2.93s
Doing aes-128-cbc for 3s on 64 size blocks: 6498529 aes-128-cbc's in 2.95s
Doing aes-128-cbc for 3s on 256 size blocks: 3676285 aes-128-cbc's in 2.92s
Doing aes-128-cbc for 3s on 1024 size blocks: 1345834 aes-128-cbc's in 2.90s
Doing aes-128-cbc for 3s on 8192 size blocks: 196918 aes-128-cbc's in 2.94s
OpenSSL 1.0.0g 18 Jan 2012
built on: Wed Jan 18 21:31:30 UTC 2012
options:bn(64,32) rc4(4x,int) des(ptr,risc1,16,long) aes(partial) blowfish(idx)
compiler: gcc -fPIC -DOPENSSL_PIC -DZLIB -DOPENSSL_THREADS
-D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTERMIO -O3
-march=i686 -Wa,--noexecstack -g -Wall -DOPENSSL_BN_ASM_PART_WORDS
-DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM
-DSHA512_ASM -DMD5_ASM -DRMD160_ASM -DAES_ASM -DWHIRLPOOL_ASM
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-128-cbc      42388.32k   140985.04k   322304.44k   475218.63k   548691.24k

# scp default
$ scp -c aes128-cbc test.dat localhost:/dev/null
test.dat                                        7%   24MB   3.4MB/s   01:28 ETA

# scp with new config
$ scp -c aes128-cbc test.dat localhost:/dev/null
test.dat                                       36%  117MB   9.1MB/s   00:22 ETA

# cat /proc/cpuinfo
processor       : 0
vendor_id       : CentaurHauls
cpu family      : 6
model           : 10
model name      : VIA Esther processor  800MHz
stepping        : 9
cpu MHz         : 399.000
cache size      : 128 KB
fdiv_bug        : no
hlt_bug         : no
f00f_bug        : no
coma_bug        : no
fpu             : yes
fpu_exception   : yes
cpuid level     : 1
wp              : yes
flags           : fpu vme de pse tsc msr pae mce cx8 sep mtrr pge cmov
pat clflush acpi mmx fxsr sse sse2 tm nx up pni est tm2 rng rng_en ace
ace_en ace2 ace2_en phe phe_en pmm pmm_en
bogomips        : 798.00
clflush size    : 64
cache_alignment : 64
address sizes   : 36 bits physical, 32 bits virtual