Hardware crypto support, ubsec RSA performance

[Rene de Vries]

Hello,

I've been testing with an "Broadcom CryptoNetX SSL800" card and the 
performance (when testing with openssl) is a bit disapointing. I would 
expect about 800 (or nearly 800) sign/s, but in stead the card+openssl 
only do about 94 sign/s (with 1024 bit RSA keys). This is less than one 
eigth of what I expected. Am I doing something wrong or is there some 
magic that I need to perform?

Rene

Measurements done on FreeBSD 4.8.
System: Pentium III 930Mhz (256Mb memory).
Using "Openssl speed rsa -elapsed" (version 0.9.7a).

With Broadcom CryptoNetX SSL800 (BM5820/ubsec):

                   sign    verify    sign/s verify/s
rsa  512 bits   0.0027s   0.0001s    369.9   8541.5
rsa 1024 bits   0.0106s   0.0002s     94.7   5392.2
rsa 2048 bits   0.1586s   0.0010s      6.3   1014.4
rsa 4096 bits   2.2629s   0.0105s      0.4     95.1

Without hardware encryption:

                   sign    verify    sign/s verify/s
rsa  512 bits   0.0031s   0.0003s    324.7   3599.0
rsa 1024 bits   0.0170s   0.0009s     59.0   1172.5
rsa 2048 bits   0.1026s   0.0029s      9.8    350.6
rsa 4096 bits   0.6629s   0.0098s      1.5    101.8

--
Rene de Vries <rene at tunix.nl>
TUNIX Internet Security & Training