Encryption Accelerator (padlock: no ace support)
-
I'm trying to take advantage of the CPU Encryption Accelerator with OpenVPN but getting "padlock: no ace support" on boot, in addition when I do speed test i see no difference see below, I would appreciate any help on how to setup test Encryption Accelerator on Pfsense 2.2.1.
[2.2.1-RELEASE][root]/root: openssl speed -evp AES-128-CBC
Doing aes-128-cbc for 3s on 16 size blocks: 778248 aes-128-cbc's in 0.27s
Doing aes-128-cbc for 3s on 64 size blocks: 753321 aes-128-cbc's in 0.23s
Doing aes-128-cbc for 3s on 256 size blocks: 654708 aes-128-cbc's in 0.30s
Doing aes-128-cbc for 3s on 1024 size blocks: 430076 aes-128-cbc's in 0.23s
Doing aes-128-cbc for 3s on 8192 size blocks: 108785 aes-128-cbc's in 0.02s
OpenSSL 1.0.1l-freebsd 15 Jan 2015
built on: date not available
options:bn(64,64) rc4(16x,int) des(idx,cisc,16,int) aes(partial) idea(int) blowfish(idx)
compiler: clang
The 'numbers' are in 1000s of bytes per second processed.
type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes
aes-128-cbc 45538.63k 205706.85k 564565.05k 1943824.88k 57034670.08k[2.2.1-RELEASE][root]/root: openssl speed -evp AES-128-CBC -engine cryptodev
engine "cryptodev" set.
Doing aes-128-cbc for 3s on 16 size blocks: 784343 aes-128-cbc's in 0.33s
Doing aes-128-cbc for 3s on 64 size blocks: 772190 aes-128-cbc's in 0.30s
Doing aes-128-cbc for 3s on 256 size blocks: 654786 aes-128-cbc's in 0.31s
Doing aes-128-cbc for 3s on 1024 size blocks: 441516 aes-128-cbc's in 0.23s
Doing aes-128-cbc for 3s on 8192 size blocks: 108646 aes-128-cbc's in 0.06s
OpenSSL 1.0.1l-freebsd 15 Jan 2015
built on: date not available
options:bn(64,64) rc4(16x,int) des(idx,cisc,16,int) aes(partial) idea(int) blowfish(idx)
compiler: clang
The 'numbers' are in 1000s of bytes per second processed.
type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes
aes-128-cbc 38246.06k 162199.50k 536400.69k 1929012.84k 14240448.51k -
same
-
Padlock is only supported on Via CPUs, unless you are running that you will see it look for and not find that hardware at boot.
https://en.wikipedia.org/wiki/VIA_Technologies#VIA_PadLock
Steve