missing AES-NI in "engine" Fedora compared to RHEL/CentOS?

[Reindl Harald]

why does Fedora's openssl not list "aesni" compared to RHEL?

the values below are showing it is in fact supported by both, on the
other hand "SSLCryptoDevice aesni" for Apache does not work on Fedora
and i am unsure if it is used automatically by default in that case

in doubt this may waste factor 8 in performance on modern hardware
http://httpd.apache.org/docs/2.4/mod/mod_ssl.html#sslcryptodevice
____________________________________________

cat /etc/redhat-release; openssl engine; cat /proc/cpuinfo | grep "model name"
CentOS release 6.4 (Final)
(aesni) Intel AES-NI engine
(dynamic) Dynamic engine loading support
model name      : Intel(R) Xeon(R) CPU           E5640  @ 2.67GHz

openssl speed aes-256-cbc
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-256 cbc      58003.13k    62866.47k    63308.37k   135122.94k   135858.86k

openssl speed -evp aes-256-cbc
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-256-cbc     460493.45k   508006.53k   517264.90k   519457.45k   520594.75k
____________________________________________

cat /etc/redhat-release; openssl engine; cat /proc/cpuinfo | grep "model name"
Fedora release 18 (Spherical Cow)
(dynamic) Dynamic engine loading support
model name      : Intel(R) Xeon(R) CPU           E5640  @ 2.67GHz

openssl speed aes-256-cbc
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-256 cbc      58347.04k    63168.39k    64110.99k   135981.36k   137257.23k

openssl speed -evp aes-256-cbc
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-256-cbc     462203.14k   512258.69k   519790.56k   522836.19k   523612.23k

[Reindl Harald]

since this is a very interesting thing i also wrote a bugreport
openvpn on RHEL would also support "--engine aesni"

https://bugzilla.redhat.com/show_bug.cgi?id=1025717

Am 01.11.2013 12:13, schrieb Reindl Harald:
>  why does Fedora's openssl not list "aesni" compared to
> RHEL?
>  
>  the values below are showing it is in fact supported by both, on the
>  other hand "SSLCryptoDevice aesni" for Apache does not work on Fedora
>  and i am unsure if it is used automatically by default in that case
>  
>  in doubt this may waste factor 8 in performance on modern hardware
>  http://httpd.apache.org/docs/2.4/mod/mod_ssl.html#sslcryptodevice
>  ____________________________________________
>  
>  cat /etc/redhat-release; openssl engine; cat /proc/cpuinfo | grep "model name"
>  CentOS release 6.4 (Final)
>  (aesni) Intel AES-NI engine
>  (dynamic) Dynamic engine loading support
>  model name      : Intel(R) Xeon(R) CPU           E5640  @ 2.67GHz
>  
>  openssl speed aes-256-cbc
>  type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
>  aes-256 cbc      58003.13k    62866.47k    63308.37k   135122.94k   135858.86k
>  
>  openssl speed -evp aes-256-cbc
>  type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
>  aes-256-cbc     460493.45k   508006.53k   517264.90k   519457.45k   520594.75k
>  ____________________________________________
>  
>  cat /etc/redhat-release; openssl engine; cat /proc/cpuinfo | grep "model name"
>  Fedora release 18 (Spherical Cow)
>  (dynamic) Dynamic engine loading support
>  model name      : Intel(R) Xeon(R) CPU           E5640  @ 2.67GHz
>  
>  openssl speed aes-256-cbc
>  type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
>  aes-256 cbc      58347.04k    63168.39k    64110.99k   135981.36k   137257.23k
>  
>  openssl speed -evp aes-256-cbc
>  type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
>  aes-256-cbc     462203.14k   512258.69k   519790.56k   522836.19k   523612.23k