missing AES-NI in "engine" Fedora compared to RHEL/CentOS?

Reindl Harald h.reindl at thelounge.net
Fri Nov 1 11:13:59 UTC 2013


why does Fedora's openssl not list "aesni" compared to RHEL?

the values below are showing it is in fact supported by both, on the
other hand "SSLCryptoDevice aesni" for Apache does not work on Fedora
and i am unsure if it is used automatically by default in that case

in doubt this may waste factor 8 in performance on modern hardware
http://httpd.apache.org/docs/2.4/mod/mod_ssl.html#sslcryptodevice
____________________________________________

cat /etc/redhat-release; openssl engine; cat /proc/cpuinfo | grep "model name"
CentOS release 6.4 (Final)
(aesni) Intel AES-NI engine
(dynamic) Dynamic engine loading support
model name      : Intel(R) Xeon(R) CPU           E5640  @ 2.67GHz

openssl speed aes-256-cbc
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-256 cbc      58003.13k    62866.47k    63308.37k   135122.94k   135858.86k

openssl speed -evp aes-256-cbc
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-256-cbc     460493.45k   508006.53k   517264.90k   519457.45k   520594.75k
____________________________________________

cat /etc/redhat-release; openssl engine; cat /proc/cpuinfo | grep "model name"
Fedora release 18 (Spherical Cow)
(dynamic) Dynamic engine loading support
model name      : Intel(R) Xeon(R) CPU           E5640  @ 2.67GHz

openssl speed aes-256-cbc
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-256 cbc      58347.04k    63168.39k    64110.99k   135981.36k   137257.23k

openssl speed -evp aes-256-cbc
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-256-cbc     462203.14k   512258.69k   519790.56k   522836.19k   523612.23k



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 263 bytes
Desc: OpenPGP digital signature
URL: <http://lists.fedoraproject.org/pipermail/devel/attachments/20131101/ba4e711a/attachment.sig>


More information about the devel mailing list