Client crypto hardware.

[JKnott]

In the client configuration, there's an option for Intel RDRAND. Is there any way to know if this is available on the client hardware? I have a Lenovo E520 ThinkPad, with i3 CPU, which I bought about 10 years ago. If that option is selected, but not available, will it be ignored as though it hadn't been selected?

[viragomann]

@jknott
I assume, RDRAND might not bring much performance improvement when using today's encryption algorithm.
But maybe it helps.

The features are written into dmesg.boot during boot.
You can check out if RDRAND is present by executing

grep RDRAND /var/run/dmesg.boot

or

grep Features /var/run/dmesg.boot

for listening all features.

[JKnott]

@viragomann

RDRAND is on my pfsense computer. I'll have to see if it's on my ThinkPad.

tnx

[JKnott]

@jknott said in Client crypto hardware.:

I have a Lenovo E520 ThinkPad, with i3 CPU, which I bought about 10 years ago.

Apparently, that computer is too old to support RDRAND. It first appeared with the Ivy Bridge CPU, which became available around the time I bought my ThinkPad.