[Pkg-raspi-maintainers] Poor openssl performance on RPI3 debian aarch64

[Michael Stapelberg]

Have you tried installing openssl and dependencies from Raspbian on the
Debian image? It sounds like you already tried mixing the kernels, so that
would be the next step to triangulate the issues, I think.

On Fri, Mar 30, 2018 at 6:24 PM, Mathieu Gallissot <
mathieu.gallissot at gmail.com> wrote:

> Dear all,
> I've been benchmarking openssl in aarch64 using the debian image and I'm
> surprised about the poor performance obtained. In the end i've got the
> raspian twice faster in 32bits than the 64bit debian.
>
> Here is the test results on raspian 32bits
>
> pi at raspberrypi:~ $ openssl version
> OpenSSL 1.1.0f  25 May 2017
>
> pi at raspberrypi:~ $ openssl speed -evp aes-256-cbc
> Doing aes-256-cbc for 3s on 16 size blocks: 5462846 aes-256-cbc's in 3.00s
> Doing aes-256-cbc for 3s on 64 size blocks: 1778112 aes-256-cbc's in 3.00s
> Doing aes-256-cbc for 3s on 256 size blocks: 482197 aes-256-cbc's in 3.00s
> Doing aes-256-cbc for 3s on 1024 size blocks: 123167 aes-256-cbc's in 3.00s
> Doing aes-256-cbc for 3s on 8192 size blocks: 15496 aes-256-cbc's in 3.00s
> Doing aes-256-cbc for 3s on 16384 size blocks: 7754 aes-256-cbc's in 3.00s
> OpenSSL 1.1.0f  25 May 2017
> built on: reproducible build, date unspecified
> options:bn(64,32) rc4(char) des(long) aes(partial) blowfish(ptr)
> compiler: gcc -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_THREADS -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_GF2m -D                                                                                  SHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPOLY1305_ASM -DOPENSSLDIR="\"/usr/lib/ssl\"" -DENGINESDIR="\"/usr                                                                                  /lib/arm-linux-gnueabihf/engines-1.1\""
> The 'numbers' are in 1000s of bytes per second processed.
> type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes  16384 bytes
> aes-256-cbc      29135.18k    37933.06k    41147.48k    42041.00k    42314.41k    42347.18k
>
> note : using a 64bits kernel doens't impact much the speed
>
> And here are the same tests results on same hardware, but with an debian
> full 64bits image build with raspi3-image-spec
>
> root at rpi3:~# openssl version
> OpenSSL 1.1.0g  2 Nov 2017
>
> root at rpi3:~# openssl speed -evp aes-256-cbc
> Doing aes-256-cbc for 3s on 16 size blocks: 2648717 aes-256-cbc's in 3.00s
> Doing aes-256-cbc for 3s on 64 size blocks: 848118 aes-256-cbc's in 3.00s
> Doing aes-256-cbc for 3s on 256 size blocks: 229195 aes-256-cbc's in 3.00s
> Doing aes-256-cbc for 3s on 1024 size blocks: 58474 aes-256-cbc's in 3.00s
> Doing aes-256-cbc for 3s on 8192 size blocks: 7353 aes-256-cbc's in 3.00s
> Doing aes-256-cbc for 3s on 16384 size blocks: 3678 aes-256-cbc's in 3.00s
> OpenSSL 1.1.0g  2 Nov 2017
> built on: reproducible build, date unspecified
> options:bn(64,64) rc4(char) des(int) aes(partial) blowfish(ptr)
> compiler: gcc -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_THREADS -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DVPAES_ASM -DECP_NISTZ256_ASM -DPOLY1305_ASM -DOPENSSLDIR="\"/usr/lib/ssl\"" -DENGINESDIR="\"/usr/lib/aarch64-linux-gnu/engines-1.1\""
> The 'numbers' are in 1000s of bytes per second processed.
> type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes  16384 bytes
> aes-256-cbc      14126.49k    18093.18k    19557.97k    19959.13k    20078.59k    20086.78k
>
> I've tried to recompile on the board the package (using apt-get source and
> debuild) without luch results. I would expect the 64bit version to be at
> least at the same speed.
> Any idea on how to increase the openssl speed ?
>
> Best,
> Mathieu
>
> _______________________________________________
> Pkg-raspi-maintainers mailing list
> Pkg-raspi-maintainers at lists.alioth.debian.org
> https://lists.alioth.debian.org/mailman/listinfo/pkg-raspi-maintainers
>
>


-- 
Best regards,
Michael
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-raspi-maintainers/attachments/20180330/4c7e9d7b/attachment.html>