missing AES-NI in "engine" Fedora compared to RHEL/CentOS?

[Reindl Harald]

since this is a very interesting thing i also wrote a bugreport
openvpn on RHEL would also support "--engine aesni"

https://bugzilla.redhat.com/show_bug.cgi?id=1025717

Am 01.11.2013 12:13, schrieb Reindl Harald:
> why does Fedora's openssl not list "aesni" compared to RHEL?
> 
> the values below are showing it is in fact supported by both, on the
> other hand "SSLCryptoDevice aesni" for Apache does not work on Fedora
> and i am unsure if it is used automatically by default in that case
> 
> in doubt this may waste factor 8 in performance on modern hardware
> http://httpd.apache.org/docs/2.4/mod/mod_ssl.html#sslcryptodevice
> ____________________________________________
> 
> cat /etc/redhat-release; openssl engine; cat /proc/cpuinfo | grep "model name"
> CentOS release 6.4 (Final)
> (aesni) Intel AES-NI engine
> (dynamic) Dynamic engine loading support
> model name      : Intel(R) Xeon(R) CPU           E5640  @ 2.67GHz
> 
> openssl speed aes-256-cbc
> type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
> aes-256 cbc      58003.13k    62866.47k    63308.37k   135122.94k   135858.86k
> 
> openssl speed -evp aes-256-cbc
> type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
> aes-256-cbc     460493.45k   508006.53k   517264.90k   519457.45k   520594.75k
> ____________________________________________
> 
> cat /etc/redhat-release; openssl engine; cat /proc/cpuinfo | grep "model name"
> Fedora release 18 (Spherical Cow)
> (dynamic) Dynamic engine loading support
> model name      : Intel(R) Xeon(R) CPU           E5640  @ 2.67GHz
> 
> openssl speed aes-256-cbc
> type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
> aes-256 cbc      58347.04k    63168.39k    64110.99k   135981.36k   137257.23k
> 
> openssl speed -evp aes-256-cbc
> type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
> aes-256-cbc     462203.14k   512258.69k   519790.56k   522836.19k   523612.23k

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 263 bytes
Desc: OpenPGP digital signature
URL: <http://lists.fedoraproject.org/pipermail/devel/attachments/20131101/1149ede6/attachment.sig>