[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: hardware encryption,Re: hardware encryption



On donderdag 3 juni 2021 21:18:25 CEST Ryutaroh Matsumoto wrote:
> Your Rock64 is significantly faster than my RPi4B. I wonder how such a big
> difference appears.

IIRC where I read about the 10x speed improvement wrt crypto with 
ARM Crypto Extension is where I also read that Broadcom does NOT 
have a license to them

> From: Diederik de Haas <didi.debian@cknow.org>
> Date: Thu, 03 Jun 2021 19:34:19 +0200,Thu, 03 Jun 2021 19:34:19 +0200
> 
> > $ openssl speed aes-128-cbc
> > The 'numbers' are in 1000s of bytes per second processed.
> > type                    16 bytes        64 bytes       256 bytes     1024 bytes    8192 bytes  16384 bytes 
> > aes-128-cbc      84716.70k   269243.61k   584986.37k   830015.83k   944873.47k   953417.73k
> > 
> > $ openssl speed -evp aes-128-cbc
> > The 'numbers' are in 1000s of bytes per second processed.
> > type                      16 bytes        64 bytes       256 bytes    1024 bytes    8192 bytes   16384 bytes 
> > AES-128-CBC      95904.58k   297023.53k   611697.15k   855083.69k   966412.97k   956033.71k
>
> On my RPi4B I have:
> # openssl speed aes-128-cbc
> OpenSSL 1.1.1k  25 Mar 2021
> built on: Thu Mar 25 20:49:34 2021 UTC
> type                    16 bytes       64 bytes      256 bytes    1024 bytes   8192 bytes  16384 bytes 
> aes-128 cbc      73719.58k    78001.25k    79918.46k    79520.45k    78646.02k    79442.42k 
> 
> # openssl speed -evp aes-128-cbc
> type                    16 bytes       64 bytes      256 bytes   1024 bytes   8192 bytes  16384 bytes 
> aes-128-cbc      37975.41k    40705.82k    41937.97k   42066.56k    42265.07k    42382.97k

What I find the most odd is that with '-evp' your scores are much lower then without.
The lack of ARM CE could explain why Rock64's scores are better then one
otherwise would expect, even though the speedup is (still) lower then I expected. 

> Note that openssl version is much older 

It appears that OpenSSL made a jump from 1.1.1X to 3.0.x.
The most likely reason I had 3.0.0-alpha16 is a YOLO action by me whereby 
I upgrade almost everything to experimental (KDE from exp was intentional)

> Kernel version is upstream 5.10.39 with almost the same kernel
> compilation options with Debian RT kernel. 

You may want to verify whether the options enabled bc of bug #976635 
are enabled with your kernel as well.

> CPU frequency is fixed to 1.5GHz by "cpupower frequency-set -g performance".

I still have to investigate what's possible on Rock64, but my main problem 
is heat and bc I have no cooling that causes problems.

> Best regards, Ryutaroh

Cheers,
   Diederik

Attachment: signature.asc
Description: This is a digitally signed message part.


Reply to: