[csw-maintainers] T4 crypto support in openssl 1.0

[Jan Holzhueter]

Hi,
Am 24.05.12 09:48, schrieb Yann Rouillard:
> But what is strange is that pkcs11 seems to be always enabled.
> 
> Under unstable10s, with SFW openssl, we can see the performance difference:
> 
> $ /usr/sfw/bin/openssl speed rsa
> Doing 512 bit private rsa's for 10s: 2060 512 bit private RSA's in 9.99s
> [...]
> 
> $ /usr/sfw/bin/openssl speed -engine pkcs11 rsa
> engine "pkcs11" set.
> Doing 512 bit private rsa's for 10s: 22976 512 bit private RSA's in 0.91s
> [...]
> 
> But with CSW openssl, we have a good performance even without enabling
> pkcs11 and it seems the library is always loaded:

Our Solaris 10 is quite old again :)
It could be that the patches you use to enable the pkcs11 are more
recent and enable it by default.

Just guessing here though.
It's not a bad thing anyway :)