[csw-maintainers] crypto-hardware acceleration for openssl

[Yann Rouillard]

Hi everybody,

I put openssl 0.9.8 with crypto-hardware acceleration support in my 
experimental repository so then can be easily tested:
pkgutil -t http://buildfarm.opencsw.org/opencsw/experimental/yann -U
pkgutil -t http://buildfarm.opencsw.org/opencsw/experimental/yann -i 
openssl libssl0_9_8 libssl_dev

I would welcome additionnal testing of the package.
If everything goes well, I am planning to release the package in 
unstable, so the performances of opencsw ssl are not anymore lower than 
the ones provided with Solaris.

You can test the performance with:
openssl speed -engine pkcs11 rsa (or dsa or ...)

I would also welcome some test with apache. Some instructions to setup 
Apache are in this file: 
http://www.oracle.com/technetwork/server-storage/archive/a11-014-crypto-accelerators-439765.pdf
I don't have administrator access on an Ultrasparc T1/T2 server (I made 
the openssl test on unstable10s).

For information, here is the results of the speed test under unstable10s:

RSA with hardware acceleration:

                   sign    verify    sign/s verify/s
rsa  512 bits 0.000038s 0.000176s  26196.6   5697.5
rsa 1024 bits 0.000267s 0.000182s   3741.9   5502.1
rsa 2048 bits 0.000292s 0.000186s   3425.5   5386.1
rsa 4096 bits 0.698000s 0.018638s      1.4     53.7


RSA without hardware acceleration:

                   sign    verify    sign/s verify/s
rsa  512 bits 0.003153s 0.000253s    317.2   3947.4
rsa 1024 bits 0.014025s 0.000656s     71.3   1523.8
rsa 2048 bits 0.077385s 0.002087s     12.9    479.2
rsa 4096 bits 0.494762s 0.007289s      2.0    137.2


DSA with hardware acceleration:

                   sign    verify    sign/s verify/s
dsa  512 bits 0.002403s 0.002793s    416.2    358.1
dsa 1024 bits 0.006339s 0.007634s    157.8    131.0
dsa 2048 bits 0.020367s 0.023923s     49.1     41.8

DSA without hardware acceleration:

                   sign    verify    sign/s verify/s
dsa  512 bits 0.000063s 0.000053s  15764.1  18955.6
dsa 1024 bits 0.000063s 0.000053s  15842.6  19026.8
dsa 2048 bits 0.033831s 0.067315s     29.6     14.9


Thanks in advance,

Yann