[Bug 259937] OpenSSL is 20x slower at AES-GCM than on Linux

From: <bugzilla-noreply_at_freebsd.org>
Date: Fri, 19 Nov 2021 15:04:50 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=259937

            Bug ID: 259937
           Summary: OpenSSL is 20x slower at AES-GCM than on Linux
           Product: Base System
           Version: 13.0-RELEASE
          Hardware: arm64
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: arm
          Assignee: freebsd-arm@FreeBSD.org
          Reporter: allanjude@FreeBSD.org

FreeBSD 14-current:

# openssl speed -evp aes-256-gcm
Doing aes-256-gcm for 3s on 16 size blocks: 19608265 aes-256-gcm's in 3.19s
Doing aes-256-gcm for 3s on 64 size blocks: 5182139 aes-256-gcm's in 3.07s
Doing aes-256-gcm for 3s on 256 size blocks: 1328395 aes-256-gcm's in 3.09s
Doing aes-256-gcm for 3s on 1024 size blocks: 345918 aes-256-gcm's in 3.18s
Doing aes-256-gcm for 3s on 8192 size blocks: 43314 aes-256-gcm's in 3.18s
Doing aes-256-gcm for 3s on 16384 size blocks: 21688 aes-256-gcm's in 3.18s
OpenSSL 1.1.1l-freebsd  24 Aug 2021
built on: reproducible build, date unspecified
options:bn(64,64) rc4(int) des(int) aes(partial) idea(int) blowfish(ptr)
compiler: clang
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes 
16384 bytes
aes-256-gcm      98425.80k   108020.57k   110199.61k   111400.89k   111592.19k 
 111751.92k


Same machine with Ubuntu 20.04:
$ openssl speed -evp aes-256-gcm
Doing aes-256-gcm for 3s on 16 size blocks: 83708856 aes-256-gcm's in 3.00s
Doing aes-256-gcm for 3s on 64 size blocks: 55912628 aes-256-gcm's in 3.00s
Doing aes-256-gcm for 3s on 256 size blocks: 20800967 aes-256-gcm's in 3.00s
Doing aes-256-gcm for 3s on 1024 size blocks: 5873794 aes-256-gcm's in 3.00s
Doing aes-256-gcm for 3s on 8192 size blocks: 768122 aes-256-gcm's in 3.00s
Doing aes-256-gcm for 3s on 16384 size blocks: 386083 aes-256-gcm's in 3.00s
OpenSSL 1.1.1f  31 Mar 2020
built on: Mon Aug 23 17:02:39 2021 UTC
options:bn(64,64) rc4(char) des(int) aes(partial) blowfish(ptr)
compiler: gcc -fPIC -pthread -Wa,--noexecstack -Wall -Wa,--noexecstack -g -O2
-fdebug-prefix-map=/build/openssl-OpXo8E/openssl-1.1.1f=.
-fstack-protector-strong -Wformat -Werror=format-security
-DOPENSSL_TLS_SECURITY_LEVEL=2 -DOPENSSL_USE_NODELETE -DOPENSSL_PIC
-DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM
-DKECCAK1600_ASM -DVPAES_ASM -DECP_NISTZ256_ASM -DPOLY1305_ASM -DNDEBUG
-Wdate-time -D_FORTIFY_SOURCE=2
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes 
16384 bytes
aes-256-gcm     446447.23k  1192802.73k  1775015.85k  2004921.69k  2097485.14k 
2108527.96k

-- 
You are receiving this mail because:
You are the assignee for the bug.