[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: hardware encryption,Re: hardware encryption



Your Rock64 is significantly faster than my RPi4B. I wonder how such a big
difference appears.

From: Diederik de Haas <didi.debian@cknow.org>
Date: Thu, 03 Jun 2021 19:34:19 +0200,Thu, 03 Jun 2021 19:34:19 +0200

> $ openssl speed aes-128-cbc
> ...
> version: 3.0.0-alpha16
> built on: built on: Thu May  6 19:54:38 2021 UTC
> ...
> The 'numbers' are in 1000s of bytes per second processed.
> type                    16 bytes        64 bytes       256 bytes     1024 bytes    8192 bytes  16384 bytes
> aes-128-cbc      84716.70k   269243.61k   584986.37k   830015.83k   944873.47k   953417.73k
> 
> $ openssl speed -evp aes-128-cbc
> ...
> The 'numbers' are in 1000s of bytes per second processed.
> type                      16 bytes        64 bytes       256 bytes     1024 bytes    8192 bytes   16384 bytes
> AES-128-CBC      95904.58k   297023.53k   611697.15k   855083.69k   966412.97k   956033.71k

On my RPi4B I have:

# openssl speed aes-128-cbc
...
OpenSSL 1.1.1k  25 Mar 2021
built on: Thu Mar 25 20:49:34 2021 UTC
options:bn(64,64) rc4(char) des(int) aes(partial) blowfish(ptr) 
compiler: gcc -fPIC -pthread -Wa,--noexecstack -Wall -Wa,--noexecstack -g -O2 -ffile-prefix-map=/build/openssl-YhzaKF/openssl-1.1.1k=. -fstack-protector-strong -Wformat -Werror=format-security -DOPENSSL_USE_NODELETE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DKECCAK1600_ASM -DVPAES_ASM -DECP_NISTZ256_ASM -DPOLY1305_ASM -DNDEBUG -Wdate-time -D_FORTIFY_SOURCE=2
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes  16384 bytes
aes-128 cbc      73719.58k    78001.25k    79918.46k    79520.45k    78646.02k    79442.42k
# openssl speed -evp aes-128-cbc
...
OpenSSL 1.1.1k  25 Mar 2021
built on: Thu Mar 25 20:49:34 2021 UTC
options:bn(64,64) rc4(char) des(int) aes(partial) blowfish(ptr) 
compiler: gcc -fPIC -pthread -Wa,--noexecstack -Wall -Wa,--noexecstack -g -O2 -ffile-prefix-map=/build/openssl-YhzaKF/openssl-1.1.1k=. -fstack-protector-strong -Wformat -Werror=format-security -DOPENSSL_USE_NODELETE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DKECCAK1600_ASM -DVPAES_ASM -DECP_NISTZ256_ASM -DPOLY1305_ASM -DNDEBUG -Wdate-time -D_FORTIFY_SOURCE=2
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes  16384 bytes
aes-128-cbc      37975.41k    40705.82k    41937.97k    42066.56k    42265.07k    42382.97k


Note that openssl version is much older but it is bundled with Debian Bullseye.
Kernel version is upstream 5.10.39 with almost the same kernel compilation options with
Debian RT kernel. CPU frequency is fixed to 1.5GHz by
"cpupower frequency-set -g performance".

Best regards, Ryutaroh


Reply to: