[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Introducing security hardening features for Lenny



On Tue, Jan 29, 2008 at 11:47:57PM +0000, brian m. carlson wrote:
> And now for some numbers, on an amd64 machine (/proc/cpuinfo at [0]), 

  Oh and I missed that at the first read, but …

> With -fPIE -pie only:
> 
> MD4: 335544320 bytes in 0.741s (431.703 MiB/s)
> MD5: 335544320 bytes in 1.052s (304.173 MiB/s)
> RMD160: 335544320 bytes in 1.755s (182.381 MiB/s)
> SHA1: 335544320 bytes in 1.797s (178.104 MiB/s)
> SHA256: 335544320 bytes in 3.517s (90.996 MiB/s)

  Of course it has no hit on amd64, it has all the relative operations
needed to support PIE properly, and is not register starved. Benches
have to be performed on x86 to have any valuable sense.

  With everything enabled, I expect on many applications on x86 to get
on a regular basis 10% to 15% performances hit. Of course, on an
architecture like amd64, I rather expect it to rarely be over a few
percent. And as despise-able x86 is, it's still by a definite margin one
of the most used architecture in Debian.

-- 
·O·  Pierre Habouzit
··O                                                madcoder@debian.org
OOO                                                http://www.madism.org

Attachment: pgpAfvzzkjfZB.pgp
Description: PGP signature


Reply to: