openssl with aes-in or padlock

RW rwmaillists at googlemail.com
Mon Sep 15 15:53:29 UTC 2014


On Thu, 11 Sep 2014 17:45:41 -0700
John-Mark Gurney wrote:

> Wojciech Puchar wrote this message on Thu, Sep 11, 2014 at 23:33
> +0200:

> > >GEOM_ELI: Encryption: AES-XTS 256
> > >GEOM_ELI:     Crypto: hardware
> > 
> > yes i have this. contrary to what you say - both AES-XTC and
> > AES-CBC gets MUCH faster with AES-NI.
> 
> Well, AES-NI CBC may be faster w/ AES-NI, but it's not as fast as
> using another mode...  AES-XTS should be many times faster than
> CBC...  


GELI was around for a long time before it had AES-XTS, and I presume
it uses its kernel threads to process multiple sectors in parallel. In
that case XTS and CBC would both get a similar benefit from SMP.


More information about the freebsd-hackers mailing list