Changes between Version 9 and Version 10 of linux/encryption

Timestamp:

05/26/2020 02:33:15 AM (4 years ago)

Author:

Bobby Jones

Comment:

Updated performance testing information

linux/encryption

@@ -144 +144 @@
 
 === Performace Comparisons
+These openssl speed tests were done using a v5.4.0 kernel and an out of tree cryptodev module on an Ubuntu Focal rootfs. In order to reproduce these results, you must use the config script within openssl's build directory to disable dynamic engine support. Otherwise openssl will almost always default to using the faster CPU method (software).
+
+{{{#!bash
+apt install build-essential pkg-config libssl-dev
+wget https://www.openssl.org/source/openssl-1.1.1g.tar.gz
+tar xvf openssl-*
+cd openssl-*
+./config disable-engine disable-dso disable-dynamic-engine enable-devcryptoeng enable-afalgeng
+make
+make install
+export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/usr/local/lib/ # prioritize built shared object path for linker this boot
+
+# Remove cryptodev module to test afalg
+rmmod cryptodev; modprobe af_alg algif_hash algif_aead algif_skcipher algif_rng
+openssl speed -evp aes-256-cbc -engine afalg -elapsed
+
+# Remove afalg modules to test cryptodev
+rmmod algif_hash algif_aead algif_skcipher algif_rng af_alg; modprobe cryptodev
+openssl speed -evp aes-256-cbc -engine devcrypto -elapsed
+
+# Remove both to ensure pure software test
+rmmod cryptodev; rmmod algif_hash algif_aead algif_skcipher algif_rng af_alg
+openssl speed -evp aes-256-cbc -elapsed
+}}}
+ 
+* Device: GW7300-00-AA
+* CPU Speed: 1200 MHz
+* OpenSSL version: 1.1.1g (aes-256-cbc)
+
+||                ||||||||||||= '''Number of Blocks Processed in 3s / Block Size in Bytes''' =||
+||= '''Engine''' =||'''16'''    ||'''64'''    ||'''256'''   ||'''1024'''   ||'''8192'''  ||'''16384'''||
+||= AF_ALG       =||15.47k||61.66k||245.18k||961.12k ||6416.15k ||10759.56k||
+||= cryptodev    =||15.75k||62.78k||250.07k||978.99k ||6572.84k||11110.23k||
+||= software     =||125752.24k||334926.68k||564419.24k||693793.79k ||743309.31k||746651.65k||
+
 * Device: GW6404-B
 * CPU Speed: 1500 MHz
-* OpenSSL version: 1.1.1c
-
-||                ||||||||||||= '''Number of Blocks Processed in 3s / Block Size in Bytes''' =||             
-||= '''Engine''' =||16    ||64    ||256   ||1024   ||8192  ||16384||  
-||= AF_ALG       =||283925||281102||254300||212132 ||75834 ||43402||
-||= cryptodev    =||958747||919563||674246||450026 ||107426||55976||
-||= software     =||959704||920003||673949||449422 ||107408||56336||
+* OpenSSL version: 1.1.1g (aes-256-cbc)
+
+||                ||||||||||||= '''Number of Blocks Processed in 3s / Block Size in Bytes''' =||
+||= '''Engine''' =||'''16'''    ||'''64'''    ||'''256'''   ||'''1024'''   ||'''8192'''  ||'''16384'''||
+||= AF_ALG       =||243.96k||992.81k||3705.26k||12669.95k ||55855.79k ||75311.79k||
+||= cryptodev    =||361.48k||1453.65k||5723.56k||20779.35k ||74918.57k||93077.50k||
+||= software     =||33182.40k||72847.42k||102824.70k||115210.24k ||119368.36k||119581.35k||
+
 
 Note: Performance of each engine may vary between systems. In general, most results are similar between engines but can vary at the low and high ends for block sizes and by individual ciphers/digests types. It's recommended to evaluate each engine on your system to determine their performance and choose the best combination that fits your use case.