[csw-maintainers] T4 crypto support in openssl 1.0

[Yann Rouillard]

Hi Dago,

You should be able to use the T2/T3 crypto units using the pkcs11 engine.
The pkcs11 is supposed to be less efficient as it requires a switch to
kernel context
(also explained here
https://blogs.oracle.com/DanX/entry/sparc_t4_openssl_engine )


But what is strange is that pkcs11 seems to be always enabled.

Under unstable10s, with SFW openssl, we can see the performance difference:

$ /usr/sfw/bin/openssl speed rsa
Doing 512 bit private rsa's for 10s: 2060 512 bit private RSA's in 9.99s
[...]

$ /usr/sfw/bin/openssl speed -engine pkcs11 rsa
engine "pkcs11" set.
Doing 512 bit private rsa's for 10s: 22976 512 bit private RSA's in 0.91s
[...]

But with CSW openssl, we have a good performance even without enabling
pkcs11 and it seems the library is always loaded:

$ /opt/csw/bin/openssl speed rsa
Doing 512 bit private rsa's for 10s: 22709 512 bit private RSA's in 0.92s
[...]



Yann



2012/5/24 Dagobert Michelsen <dam at opencsw.org>

> Hi Yann,
>
> Am 24.05.2012 um 09:26 schrieb Yann Rouillard:
>
> Here is a test you could do:
>
> - launch the following commands with the current openssl:
> openssl speed -evp aes-128-cbc
> openssl speed -evp aes-192-cbc
> openssl speed -evp aes-256-cbc
>
> - then install openssl from my experimental repository and launch the
> following commands:
> openssl speed -engine t4 -evp aes-128-cbc
> openssl speed -engine t4 -evp aes-192-cbc
> openssl speed -engine t4 -evp aes-256-cbc
>
> then compare !
>
> Here are some benchmarks published on an oracle blog:
> https://blogs.oracle.com/DanX/entry/sparc_t4_openssl_engine
>
>
> Is it possible to also use the T2/T3 crypto units?
>
>
> Best regards
>
>   -- Dago
>
> --
> "You don't become great by trying to be great, you become great by wanting
> to do something,
> and then doing it so hard that you become great in the process." - xkcd
> #896
>
>
> _______________________________________________
> maintainers mailing list
> maintainers at lists.opencsw.org
> https://lists.opencsw.org/mailman/listinfo/maintainers
> .:: This mailing list's archive is public. ::.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opencsw.org/pipermail/maintainers/attachments/20120524/1c89af95/attachment-0001.html>