AESNI

[Mike Tancsa]

On 11/12/2010 4:28 PM, Mike Tancsa wrote:
> On 11/12/2010 3:26 PM, Kostik Belousov wrote:
>> On Fri, Nov 12, 2010 at 09:58:53AM -0500, Daryl Richards wrote:
>>> I'm wondering what the status is of AES-NI in 8-STABLE? I can find 
>>> references to it being put into 9 back in July, with the note that it 
>>> would be MFC'ed within a month, but as far as I've been able to find, 
>>> nothing after that.
>> As a public service, since I already got several private mails,
>> I will state the current situation:
>>
>> AESNI merge depends on the merge of r208833 and a lot of followups to
>> r208833. The merge of r208833 needs r208453, that was committed to stable/8
>> only recently, since it required an approval from re at .
>>
>> This delay together with lack of the time recently on my side makes me
>> skeptical about chances to have aesni(4) in 8.2.
>>
>> Please note that aesni(4) is not needed to use AESNI in usermode.
> 
> BTW, has anyone tried merging the patch at
> 
> http://rt.openssl.org/Ticket/Display.html?id=2067&user=guest&pass=guest
> 
> to RELENG_8's openssl ?

Seems to fail in the buildworld.

 Patching /usr/src/crypto/openssl works (if you remove the windows
patches to .bat files) and even doing
cd /usr/src/secure/usr.bin/openssl;make depend;make
works




===> libexec/telnetd (all)
cc -O2 -pipe  -DLINEMODE -DUSE_TERMIO -DDIAGNOSTICS -DOLD_ENVIRON
-DENV_HACK -DSTREAMSPTY -DINET6
-I/usr/src/libexec/telnetd/../../contrib/telnet -DAUTHENTICATION
-DENCRYPTION -DKRB5 -DFORWARD -Dnet_write=telnet_net_write -std=gnu99
-fstack-protector -Wsystem-headers -Werror -Wall -Wno-format-y2k
-Wno-uninitialized -Wno-pointer-sign  -o telnetd global.o slc.o state.o
sys_term.o telnetd.o termstat.o utility.o authenc.o -lutil -ltermcap
/usr/obj/usr/src/libexec/telnetd/../../lib/libtelnet/libtelnet.a -lmp
-lcrypto -lcrypt -lpam -lkrb5 -lhx509 -lasn1 -lroken -lcom_err
/usr/obj/usr/src/tmp/usr/lib/libcrypto.so: undefined reference to
`ENGINE_load_aesni'
*** Error code 1

Stop in /usr/src/libexec/telnetd.
*** Error code 1

Stop in /usr/src/libexec.
*** Error code 1

Stop in /usr/src.
*** Error code 1

Stop in /usr/src.
*** Error code 1

Stop in /usr/src.