Re: Soekris vpn1411 (Hifn 7955) not working

Jukka Salmi --> tech-crypto (2008-06-05 01:14:35 +0200):
> BTW, on one of my -current systems (built using default settings) I
> also see only the engines listed above, but on another -current system
> (using the same binaries) I do see the cryptodev. Hmm.

Ok, PEBKAC: I forgot to reset kern.usercrypto...

Now, with kern.usercrypto set, using or not using cryptodev does show
a difference:

$ openssl speed -elapsed -evp des
SIOCSESSION violates kernel parameters 22
SIOCSESSION violates kernel parameters 22
You have chosen to measure elapsed time instead of user CPU time.
To get the most accurate results, try to run this
program when this computer is idle.
Doing des-cbc for 3s on 16 size blocks: 76053 des-cbc's in 3.01s
Doing des-cbc for 3s on 64 size blocks: 20451 des-cbc's in 3.00s
Doing des-cbc for 3s on 256 size blocks: 5211 des-cbc's in 3.00s
Doing des-cbc for 3s on 1024 size blocks: 1306 des-cbc's in 3.01s
Doing des-cbc for 3s on 8192 size blocks: 162 des-cbc's in 3.02s
OpenSSL 0.9.8e 23 Feb 2007
built on: NetBSD 4.0_STABLE
options:bn(32,32) md2(int) rc4(ptr,int) des(ptr,risc2,16,long) aes(partial) blowfish(ptr2) 
compiler: gcc version 4.1.2 20061021 (prerelease) (NetBSD nb3 20061125)
available timing options: USE_TOD HZ=100 [sysconf value]
timing function used: gettimeofday
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
des-cbc            404.51k      435.63k      443.93k      444.84k      439.56k

$ openssl speed -elapsed -evp des -engine cryptodev
SIOCSESSION violates kernel parameters 22
SIOCSESSION violates kernel parameters 22
SIOCSESSION violates kernel parameters 22
SIOCSESSION violates kernel parameters 22
engine "cryptodev" set.
You have chosen to measure elapsed time instead of user CPU time.
To get the most accurate results, try to run this
program when this computer is idle.
Doing des-cbc for 3s on 16 size blocks: 4087 des-cbc's in 3.01s
Doing des-cbc for 3s on 64 size blocks: 4008 des-cbc's in 3.00s
Doing des-cbc for 3s on 256 size blocks: 4345 des-cbc's in 3.00s
Doing des-cbc for 3s on 1024 size blocks: 3756 des-cbc's in 3.00s
Doing des-cbc for 3s on 8192 size blocks: 1711 des-cbc's in 3.00s
OpenSSL 0.9.8e 23 Feb 2007
built on: NetBSD 4.0_STABLE
options:bn(32,32) md2(int) rc4(ptr,int) des(ptr,risc2,16,long) aes(partial) blowfish(ptr2) 
compiler: gcc version 4.1.2 20061021 (prerelease) (NetBSD nb3 20061125)
available timing options: USE_TOD HZ=100 [sysconf value]
timing function used: gettimeofday
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
des-cbc             21.73k       85.47k      370.36k     1280.58k     4666.82k


I see similar numbers for DES3 and AES; the vpn1411 seems to be faster
for block sizes larger than 256, and slower else. Are these numbers
about what I should expect?


Thanks and sorry for the noise...

Regards, Jukka

-- 
bashian roulette:
$ ((RANDOM%6)) || rm -rf ~