[Pkg-openssl-devel] Bug#722397: 1.0.1 already have aes ni support compiled in

[Nestor A. Diaz]

As Kurt told me the OpenSSL package on wheezy already include support
for AES NI and for the records:

To test it we have to use the EVP interface, my benchmark show
434,758.66k vs. 76,116.20k that's 571 % increase !!!
 
With AES NI this are the results:

# openssl speed -evp aes-256-cbc
Doing aes-256-cbc for 3s on 16 size blocks: 80973800 aes-256-cbc's in 2.98s
Doing aes-256-cbc for 3s on 64 size blocks: 21301656 aes-256-cbc's in 3.00s
Doing aes-256-cbc for 3s on 256 size blocks: 5392031 aes-256-cbc's in 3.00s
Doing aes-256-cbc for 3s on 1024 size blocks: 1352420 aes-256-cbc's in 2.98s
Doing aes-256-cbc for 3s on 8192 size blocks: 169036 aes-256-cbc's in 3.00s
OpenSSL 1.0.1e 11 Feb 2013
built on: Tue Sep 10 11:45:51 COT 2013
options:bn(64,32) rc4(8x,mmx) des(ptr,risc1,16,long) aes(partial)
blowfish(idx)
compiler: gcc -fPIC -DOPENSSL_PIC -DZLIB -DOPENSSL_THREADS -D_REENTRANT
-DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTERMIO -g -O2 -fstack-protector
--param=ssp-buffer-size=4 -Wformat -Werror=format-security
-D_FORTIFY_SOURCE=2 -Wl,-z,relro -Wa,--noexecstack -Wall -march=i686
-DOPENSSL_BN_ASM_PART_WORDS -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT
-DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM
-DRMD160_ASM -DAES_ASM -DVPAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192
bytes
aes-256-cbc     434758.66k   454435.33k   460119.98k   464724.19k  
461580.97k

Without AES NI this are the results:

# openssl speed aes-256-cbc
Doing aes-256 cbc for 3s on 16 size blocks: 14176643 aes-256 cbc's in 2.98s
Doing aes-256 cbc for 3s on 64 size blocks: 3893897 aes-256 cbc's in 3.00s
Doing aes-256 cbc for 3s on 256 size blocks: 994658 aes-256 cbc's in 3.00s
Doing aes-256 cbc for 3s on 1024 size blocks: 251138 aes-256 cbc's in 3.00s
Doing aes-256 cbc for 3s on 8192 size blocks: 31452 aes-256 cbc's in 2.98s
OpenSSL 1.0.1e 11 Feb 2013
built on: Tue Sep 10 11:45:51 COT 2013
options:bn(64,32) rc4(8x,mmx) des(ptr,risc1,16,long) aes(partial)
blowfish(idx)
compiler: gcc -fPIC -DOPENSSL_PIC -DZLIB -DOPENSSL_THREADS -D_REENTRANT
-DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTERMIO -g -O2 -fstack-protector
--param=ssp-buffer-size=4 -Wformat -Werror=format-security
-D_FORTIFY_SOURCE=2 -Wl,-z,relro -Wa,--noexecstack -Wall -march=i686
-DOPENSSL_BN_ASM_PART_WORDS -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT
-DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM
-DRMD160_ASM -DAES_ASM -DVPAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192
bytes
aes-256 cbc      76116.20k    83069.80k    84877.48k    85721.77k   
86461.34k


Slds.
 

-- 
Typed on my key64.org keyboard

Nestor A Diaz