Date: Mon, 15 Sep 2014 16:53:23 +0100 From: RW <rwmaillists@googlemail.com> To: freebsd-hackers@freebsd.org Subject: Re: openssl with aes-in or padlock Message-ID: <20140915165323.1c951385@gumby.homeunix.com> In-Reply-To: <20140912004541.GQ82175@funkthat.com> References: <alpine.BSF.2.00.1409111858470.1185@wojtek.dom> <20140911180258.GN82175@funkthat.com> <alpine.BSF.2.00.1409112332160.2140@wojtek.dom> <20140912004541.GQ82175@funkthat.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 11 Sep 2014 17:45:41 -0700 John-Mark Gurney wrote: > Wojciech Puchar wrote this message on Thu, Sep 11, 2014 at 23:33 > +0200: > > >GEOM_ELI: Encryption: AES-XTS 256 > > >GEOM_ELI: Crypto: hardware > > > > yes i have this. contrary to what you say - both AES-XTC and > > AES-CBC gets MUCH faster with AES-NI. > > Well, AES-NI CBC may be faster w/ AES-NI, but it's not as fast as > using another mode... AES-XTS should be many times faster than > CBC... GELI was around for a long time before it had AES-XTS, and I presume it uses its kernel threads to process multiple sectors in parallel. In that case XTS and CBC would both get a similar benefit from SMP.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20140915165323.1c951385>