[Voyage-linux] geode-aes not being used by OpenSSL?

[Jordi Soucheiron]

I'm interested in this topic. I use openvpn and openssh all the time.
Some time ago I tried to see if there's a lot difference between using
the modules or not, but I found no difference at all. Now I'm using a
2.6.29 kernel without cryptodev. Let us now what you find out.

2009/6/2 Hans Johnson <hans.johnson at gmail.com>:
> Alas, I also have that loaded.  Currently loaded (related) modules are:
>
> ocf
> cryptodev
> cryptosoft
> geode_aes
>
> Interestingly, though, lsmod claims that ocf is used by cryptosoft and
> cryptodev, but does not indicate geode_aes.
>
> I'm still hacking at this.  I'm going to try building kernel 2.6.29 and see
> if that helps out.  If I can get a working .deb for the ALIX, I'd be happy
> to contribute it back to the project.
>
> thanks for all your hard work!
>
> Regards,
>
> Hans Johnson
>
> On Mon, Jun 1, 2009 at 6:40 PM, Kim-man 'Punky' TSE <punkytse at punknix.com>
> wrote:
>>
>> Hi Hans,
>>
>> Try "modprobe cryptosoft" as well, it makes the difference.
>>
>> - Punky
>>
>>
>> Hans Johnson wrote:
>>>
>>> Hi All,
>>>
>>> I'm just attempting to get the geode-aes up and running on my ALIX, and
>>> am running into some issues.
>>>
>>> I have the cryptodev modules loaded, along with ocf, geode_aes, and
>>> cryptosoft.
>>>
>>> I can verfy that the geode_aes is loaded, as if I run the cryptotest
>>> program from the OCF folks, it will do 309mbps of AES-128 with the geode_aes
>>> module loaded, and about 40mbps without.
>>>
>>> I also have the ocf versions of openssl and libssl (0.9.8g-15ocf) from
>>> the voyage archives installed, and get no errors when I run
>>>
>>> openssl speed -engine cryptodev -evp aes-128-cbc
>>>
>>> And, in fact, openssl seems to report significantly lower performance
>>> when geode_aes is enabled, compared to when it is not, which doesn't make
>>> much sense to me.
>>>
>>> Also, I tried sending 100MB of /dev/zero through an ssh link back to my
>>> main server, and was averaging only 3.9MB/s, which is about what you would
>>> expect without the hardware crypto.  (The command here is:
>>>
>>> ssh -c aes128-cbc root at 10.0.0.1 <mailto:root at 10.0.0.1> dd if=/dev/zero
>>> count=102400 bs=1024 > /dev/null
>>>
>>> and there is no difference in performance between having geode_aes loaded
>>> or not.
>>>
>>> I have to admit, I'm a bit puzzled as to what's going on here.
>>>
>>> Thanks,
>>>
>>> Hans
>>> --
>>> ---------------------------------------------
>>> Hans Johnson (hans.johnson at gmail.com <mailto:hans.johnson at gmail.com>)
>>> B.ASc, Computer Engineering
>>> Simon Fraser University
>>>
>>> ... Si hoc legere scis numium eruditionis habes. -- Anonymous
>>>
>>> ------------------------------------------------------------------------
>>>
>>> _______________________________________________
>>> Voyage-linux mailing list
>>> Voyage-linux at list.voyage.hk
>>> http://list.voyage.hk/mailman/listinfo/voyage-linux
>>>
>>
>>
>> --
>> Regards,
>> Punky
>>
>> Voyage Solutions (http://solution.voyage.hk)
>> * Embedded Solutions and Systems
>>  - Mesh Networking, Captive Portal, IP Surveillance, VoIP/PBX
>>  - Network Engineering, Development Platform and Consultation
>>
>>
>
>
>
> --
> ---------------------------------------------
> Hans Johnson (hans.johnson at gmail.com)
> B.ASc, Computer Engineering
> Simon Fraser University
>
> ... Si hoc legere scis numium eruditionis habes. -- Anonymous
>
>
> _______________________________________________
> Voyage-linux mailing list
> Voyage-linux at list.voyage.hk
> http://list.voyage.hk/mailman/listinfo/voyage-linux
>
>



-- 
Jordi Soucheiron
Software Engineer

DEXMA
Parc Tecnològic la Salle
Sant Joan de la Salle, 42
08022 Barcelona
t/f: [+34] 93 181 01 95
www.dexmatech.com
jsoucheiron at dexmatech.com