Re: openssl speed

On Jan 18, 2008 12:59 AM, Tobias Nygren <tnnnetbsd.org> wrote:
> Here's a comparison of openssl in base versus openssl
in pkgsrc.
> (hmm, is the one in base built with -DAES_ASM?)

OpenSSL was out of the box.

Nice improvement:
> aes-128 cbc      19817.54k    32046.81k    35250.21k   
34628.52k    34475.44k
> aes-128 cbc      29900.87k    63051.02k    75165.91k   
74338.22k    78229.52k

So shouldn't it be added some performance boosting options
to base
openssl build?
If not, why?

Cheers...

On Fri, 18 Jan 2008 01:12:56 +0100
comfooc <comfoocgmail.com> wrote:

> On Jan 18, 2008 12:59 AM, Tobias Nygren <tnnnetbsd.org> wrote:
> > Here's a comparison of openssl in base versus
openssl in pkgsrc.
> > (hmm, is the one in base built with -DAES_ASM?)
> 
> OpenSSL was out of the box.
> 
> Nice improvement:
> > aes-128 cbc      19817.54k    32046.81k   
35250.21k
> > 34628.52k    34475.44k aes-128 cbc      29900.87k 
  63051.02k
> > 75165.91k    74338.22k    78229.52k
> 
> So shouldn't it be added some performance boosting
options to base
> openssl build?
> If not, why?
> 
NetBSD has decided -- probably correctly -- that Perl should
not be
part of the base system.  OpenSSL is, and if it can't be
built in
some mode without Perl the base system has to do without
that option.
The question is what we can or should do about it in this
case.


		--Steve Bellovin, http://www.cs.columbi
a.edu/~smb