<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Hi Yann,<div><br><div><div>Am 24.05.2012 um 09:48 schrieb Yann Rouillard:</div><blockquote type="cite"><div>You should be able to use the T2/T3 crypto units using the pkcs11 engine.</div><div>The pkcs11 is supposed to be less efficient as it requires a switch to kernel context </div><div>(also explained here <a href="https://blogs.oracle.com/DanX/entry/sparc_t4_openssl_engine">https://blogs.oracle.com/DanX/entry/sparc_t4_openssl_engine</a> )</div>
<div><br></div><div><br></div><div>But what is strange is that pkcs11 seems to be always enabled.</div><div><br></div><div>Under unstable10s, with SFW openssl, we can see the performance difference:</div></blockquote><br></div><div>OTOH the OpenCSW openssl also has the "dynamic" engine which the SFW openssl not has:</div><div><br></div><div><div>unstable10s% /usr/sfw/bin/openssl engine</div><div>(pkcs11) PKCS #11 engine support</div><div><br></div><div><div>unstable10s% openssl engine</div><div>(dynamic) Dynamic engine loading support</div><div>(pkcs11) PKCS #11 engine support</div></div><div><br></div><div>In general I find it preferable if you get the most out of the machine by default :-)</div><div><br></div><div><br></div><div>Best regards</div><div><br></div><div> -- Dago</div></div><br><div>
<div><div><span class="Apple-style-span" style="font-size: 12px; ">-- </span></div><div><span class="Apple-style-span" style="font-size: 12px; ">"You don't become great by trying to be great, you become great by wanting to </span><span class="Apple-style-span" style="font-size: 12px; ">do something,</span></div><div><span class="Apple-style-span" style="font-size: 12px; ">and then doing it so hard that you become great in the process." - xkcd #896</span></div></div>
</div>
<br></div></body></html>