[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: hardware encryption,Re: hardware encryption



[Note that I've combined the output of several posts for comparison]
[As a result I've also made several edits for consistency/readability]

On donderdag 3 juni 2021 21:40:04 CEST Ryutaroh Matsumoto wrote:
> From: Ryutaroh Matsumoto <ryutaroh@ict.e.titech.ac.jp>
> > Note that openssl version is much older ... with Debian Bullseye.
> I installed openssl ver. 3 from Debian experimental,
> and observed much slower speed than ver. 1.1.1 in Debian Bullseye,
> on the same hardware and kernel, as below. Interesting...
> 
> # openssl speed aes-128-cbc
> OpenSSL 1.1.1k  25 Mar 2021
> The 'numbers' are in 1000s of bytes per second processed.
> type                  16 bytes        64 bytes      256 bytes   1024 bytes   8192bytes  16384 bytes 
> aes-128 cbc   73719.58k    78001.25k    79918.46k    79520.45k    78646.02k    79442.42k
> for easy comparison, I'm adding *your* 3.0.0-alpha16 scores directly below
> aes-128-cbc   37858.56k    40995.79k    41736.44k   42339.69k    41984.00k    42350.33k
> 
> # openssl speed -evp aes-128-cbc
> The 'numbers' are in 1000s of bytes per second processed.
> type                    16 bytes        64 bytes      256 bytes  1024 bytes   8192bytes  16384 bytes 
> aes-128-cbc     37975.41k    40705.82k    41937.97k    42066.56k    42265.07k    42382.97k
> for easy comparison, I'm adding *your* 3.0.0-alpha16 scores directly below
> AES-128-CBC   38057.99k    41038.28k    41973.03k   41930.50k    42233.35k    42308.27k

$ openssl speed aes-128-cbc
OpenSSL 1.1.1k  25 Mar 2021
The 'numbers' are in 1000s of bytes per second processed.
type                   16 bytes         64 bytes      256 bytes    1024 bytes     8192 bytes  16384 bytes
aes-128 cbc    44008.81k      51444.78k    53902.17k    54553.60k      54730.75k     54717.10k
> for easy comparison, I'm adding my 3.0.0-alpha16 scores directly below
aes-128-cbc    84716.70k   269243.61k   584986.37k   830015.83k   944873.47k   953417.73k

$ openssl speed -evp aes-128-cbc
The 'numbers' are in 1000s of bytes per second processed.
type                   16 bytes         64 bytes      256 bytes    1024 bytes     8192 bytes  16384 bytes
aes-128-cbc     84829.88k   269672.83k   575085.57k   836608.00k   963663.19k   974023.34k
> for easy comparison, I'm adding my 3.0.0-alpha16 scores directly below
AES-128-CBC   95904.58k   297023.53k   611697.15k   855083.69k   966412.97k   956033.71k


This is indeed *quite* interesting!
In your case, the test with OpenSSL 1.1.1k without '-evp' stands (far) out 
from your other score in a positive way.
In my case, it is the same combo that stands out in a negative way.


https://openwrt.org/docs/techref/hardware/cryptographic.hardware.accelerators#finding_out_what_s_available_in_the_kernel
is the only page I found wrt /proc/crypto and I do indeed have 
several 'skcipher' and 'shash' nodes with prio >= 300.
That article also speaks about /dev/crypto, but I don't have that.

So there's a reasonable chance I indeed do have HW accelerated crypto,
but it doesn't seem to be near '10x' speed improvements.

Thermal issues may also play a role. I noticed that if I did a test 
after letting the device idle for a while, so it can cool off (?), did result
in higher scores. The Rock64 tends to get (quite) hot pretty quickly
and that _may_ mean it throttles back quickly. I haven't done any 
measuring, so I may be completely off on this. 
I'm pretty sure the RPi (4) has had more man-power devoted to this issue.

Cheers,
  Diederik

Attachment: signature.asc
Description: This is a digitally signed message part.


Reply to: