[Pkg-openssl-devel] Bug#607914: Bug#607914: please enable padlock engine for 1.0.0 version of openssl

[kieran at pawsoff.org]

On Fri, Dec 24, 2010 at 04:25:59PM +0100, Kurt Roeckx wrote:
> On Fri, Dec 24, 2010 at 01:27:20PM +0000, kieran at pawsoff.org wrote:
> > On Fri, Dec 24, 2010 at 02:23:32PM +0100, Kurt Roeckx wrote:
> > > On Fri, Dec 24, 2010 at 08:52:21AM +0000, kieran fulke wrote:
> > > > Package: openssl
> > > > Version: 1.0.0c-2
> > > > Severity: normal
> > > > 
> > > > 
> > > > # dpkg -l openssl ; echo ; cat /proc/cpuinfo ; echo ; openssl engine
> > > 
> > > Please try to run "openssl engine padlock".
> > > 
> > > 
> > > Kurt
> > > 
> > 
> > # openssl engine padlock
> > (padlock) VIA PadLock (no-RNG, ACE)
> > 
> > ok, behaviour i recall was it showed with just 'openssl engine'. thanks.
> 
> Can you run "openssl speed aes"
> 
> Then put the attached file in /etc/ssl/openssl.cnf
> 
> And run "openssl speed aes" again?
> 
> I don't have access to any padlock hardware, so I can't test much.
> But as far as I can tell this should load it and hopefully use it
> when available.  And "openssl engine" probably won't tell you that
> it's being used.
> 
> 
> Kurt
> 

it looks like it either doesnt work, or openssl 1.0.0 is loading padlock automatically.

without specific engine config;
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-128 cbc       7141.29k     8937.46k     9113.60k    18029.77k    18172.18k
aes-192 cbc       7459.08k     7802.46k     7854.81k    15339.60k    15417.84k
aes-256 cbc       6237.56k     6420.69k     6514.11k    13124.33k    13261.18k

with;
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-128 cbc       6916.38k     9025.19k     9159.95k    18126.29k    18177.30k
aes-192 cbc       7437.88k     7803.05k     7825.75k    15382.58k    15410.06k
aes-256 cbc       6224.65k     6396.36k     6459.22k    13181.91k    13269.17k
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 210 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-openssl-devel/attachments/20110105/4fe93895/attachment.pgp>