another thing is SSHD cpu usage.. with or without, on large transfer cpu usage is practicaly the same ...
2011/2/14 Rogério Soares <rogerio.soa...@gmail.com> > maybe i made some confusion here... > > i' can't get any call to libica, that is why a guess that is not working > ... :-/ > > > > On Mon, Feb 14, 2011 at 7:56 PM, Marcy Cortes < > marcy.d.cor...@wellsfargo.com> wrote: > >> Ok, good that works. >> And you should seen some incrementing in all those zero's down at the >> bottom of /proc/drivers/z90crypt, correct? >> >> And you don't see any on SSH leading you to believe its not working for >> ssh? >> >> >> >> Marcy Cortes >> >> Operating Systems Engineer, z/VM and Linux on System z >> Enterprise Hosting Services, Mainframe/Midrange Services >> >> Wells Fargo Bank | 201 Third Street | San Francisco, CA 94103 >> MAC A0187-050 >> Tel 415-477-6343 | Cell 415-517-0895 >> >> marcy.d.cor...@wellsfargo.com >> >> This message may contain confidential and/or privileged information. If >> you are not the addressee or authorized to receive this for the addressee, >> you must not use, copy, disclose, or take any action based on this message >> or any information herein. If you have received this message in error, >> please advise the sender immediately by reply e-mail and delete this >> message. Thank you for your cooperation. >> >> >> -----Original Message----- >> From: Linux on 390 Port [mailto:LINUX-390@vm.marist.edu] On Behalf Of >> Rogério Soares >> Sent: Monday, February 14, 2011 1:41 PM >> To: LINUX-390@vm.marist.edu >> Subject: Re: [LINUX-390] crypto with sshd >> >> Marcy, >> >> with >> >> #openssl_conf = openssl_def >> >> >> jbsp124:~ # openssl speed -evp des-ede3-cbc >> Doing des-ede3-cbc for 3s on 16 size blocks: 4132050 des-ede3-cbc's in >> 2.94s >> Doing des-ede3-cbc for 3s on 64 size blocks: 1090654 des-ede3-cbc's in >> 2.95s >> Doing des-ede3-cbc for 3s on 256 size blocks: 276504 des-ede3-cbc's in >> 2.97s >> Doing des-ede3-cbc for 3s on 1024 size blocks: 69077 des-ede3-cbc's in >> 2.96s >> Doing des-ede3-cbc for 3s on 8192 size blocks: 8580 des-ede3-cbc's in >> 2.94s >> OpenSSL 0.9.8a 11 Oct 2005 >> built on: Mon Jul 27 13:51:43 UTC 2009 >> options:bn(64,64) md2(int) rc4(ptr,int) des(idx,cisc,4,long) aes(partial) >> blowfish(idx) >> compiler: gcc -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT >> -DDSO_DLFCN >> -DHAVE_DLFCN_H -DB_ENDIAN -DNO_ASM -DMD32_REG_T=int -O2 -fmessage-length=0 >> -Wall -g -fomit-frame-pointer -fno-strict-aliasing -DTERMIO -Wall >> -fstack-protector -fbranch-probabilities -DB_ENDIAN -DNO_ASM >> available timing options: TIMES TIMEB HZ=100 [sysconf value] >> timing function used: times >> The 'numbers' are in 1000s of bytes per second processed. >> type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 >> bytes >> des-ede3-cbc 22487.35k 23661.65k 23833.34k 23896.91k >> 23907.27k >> >> >> with >> >> openssl_conf = openssl_def >> >> jbsp124:~ # vi /etc/ssl/openssl.cnf >> jbsp124:~ # openssl speed -evp des-ede3-cbc >> Doing des-ede3-cbc for 3s on 16 size blocks: 12827073 des-ede3-cbc's in >> 2.97s >> Doing des-ede3-cbc for 3s on 64 size blocks: 8270315 des-ede3-cbc's in >> 2.97s >> Doing des-ede3-cbc for 3s on 256 size blocks: 3360218 des-ede3-cbc's in >> 2.97s >> Doing des-ede3-cbc for 3s on 1024 size blocks: 1006040 des-ede3-cbc's in >> 2.98s >> Doing des-ede3-cbc for 3s on 8192 size blocks: 132563 des-ede3-cbc's in >> 2.98s >> OpenSSL 0.9.8a 11 Oct 2005 >> built on: Mon Jul 27 13:51:43 UTC 2009 >> options:bn(64,64) md2(int) rc4(ptr,int) des(idx,cisc,4,long) aes(partial) >> blowfish(idx) >> compiler: gcc -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT >> -DDSO_DLFCN >> -DHAVE_DLFCN_H -DB_ENDIAN -DNO_ASM -DMD32_REG_T=int -O2 -fmessage-length=0 >> -Wall -g -fomit-frame-pointer -fno-strict-aliasing -DTERMIO -Wall >> -fstack-protector -fbranch-probabilities -DB_ENDIAN -DNO_ASM >> available timing options: TIMES TIMEB HZ=100 [sysconf value] >> timing function used: times >> The 'numbers' are in 1000s of bytes per second processed. >> type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 >> bytes >> des-ede3-cbc 69102.08k 178215.54k 289634.95k 345699.65k >> 364414.80k >> jbsp124:~ # >> >> >> >> >> On Mon, Feb 14, 2011 at 7:19 PM, Marcy Cortes < >> marcy.d.cor...@wellsfargo.com >> > wrote: >> >> > You have no card accessible to Linux. >> > >> > Do you have a OPTION CRYPTO APVIRT in your directory entry >> > What do you get when you type >> > >> > Q CRYPTO AP on VM. >> > >> > >> > >> > Marcy >> > >> > >> > -----Original Message----- >> > From: Linux on 390 Port [mailto:LINUX-390@vm.marist.edu] On Behalf Of >> > Rogério Soares >> > Sent: Monday, February 14, 2011 1:14 PM >> > To: LINUX-390@vm.marist.edu >> > Subject: Re: [LINUX-390] crypto with sshd >> > >> > and yes, i'm running under vm 6.1. >> > >> > >> > >> > On Mon, Feb 14, 2011 at 7:07 PM, Marcy Cortes < >> > marcy.d.cor...@wellsfargo.com >> > > wrote: >> > >> > > I'm pretty sure SLES 10 SP3's openssh is already built correctly and >> you >> > > should not have to rebuild it. >> > > What do you get when you >> > > cat /proc/drivers/z90crypt (please post) >> > > Are you running under VM? >> > > >> > > >> > > Marcy >> > > >> > > -----Original Message----- >> > > From: Linux on 390 Port [mailto:LINUX-390@vm.marist.edu] On Behalf Of >> > > Rogério Soares >> > > Sent: Monday, February 14, 2011 12:53 PM >> > > To: LINUX-390@vm.marist.edu >> > > Subject: Re: [LINUX-390] crypto with sshd >> > > >> > > i get the rpm source version from SLES10SP3 to openssh-4.2p1-18.40.35 >> > > package and change de spec file to include --ssl-engine and made a >> > rpmbuild >> > > .. that is why asking.. on paper is not clear if the change is only >> this >> > or >> > > something more... thanks anyway. >> > > >> > > >> > > >> > > On Mon, Feb 14, 2011 at 6:43 PM, Mark Post <mp...@novell.com> wrote: >> > > >> > > > >>> On 2/14/2011 at 03:08 PM, Rogério Soares< >> rogerio.soa...@gmail.com> >> > > > wrote: >> > > > > Mark, i already did it too.. >> > > > > >> > > > > jbsp124:~ # openssl engine >> > > > > (dynamic) Dynamic engine loading support >> > > > > (ibmca) Ibmca hardware engine support >> > > > > jbsp124:~ # >> > > > > jbsp124:~ # >> > > > > jbsp124:~ # rpm -qa | grep openss >> > > > > openssl-devel-0.9.8a-18.36 >> > > > > openssl-0.9.8a-18.36 >> > > > > openssh-askpass-4.2p1-18.40.35 >> > > > > openssl-ibmca-1.0.0-7.16 >> > > > > compat-openssl097g-0.9.7g-13.16 >> > > > > openssh-4.2p1-18.40.35 >> > > > > >> > > > > on sshd server the only change is enable --ssl-engine ? >> > > > >> > > > You need to have a version of openSSH with the patch that actually >> > > enables >> > > > the use of SSL. In the IBM paper, they were working with an >> modified >> > > > version of openssh-5.1p1. I doubt very much that a copy of the >> 4.2p1 >> > > source >> > > > is going to have that. >> > > > >> > > > >> > > > Mark Post >> > > > >> > > > >> ---------------------------------------------------------------------- >> > > > For LINUX-390 subscribe / signoff / archive access instructions, >> > > > send email to lists...@vm.marist.edu with the message: INFO >> LINUX-390 >> > or >> > > > visit >> > > > http://www.marist.edu/htbin/wlvindex?LINUX-390 >> > > > >> ---------------------------------------------------------------------- >> > > > For more information on Linux on System z, visit >> > > > http://wiki.linuxvm.org/ >> > > > >> > > >> > > ---------------------------------------------------------------------- >> > > For LINUX-390 subscribe / signoff / archive access instructions, >> > > send email to lists...@vm.marist.edu with the message: INFO LINUX-390 >> or >> > > visit >> > > http://www.marist.edu/htbin/wlvindex?LINUX-390 >> > > ---------------------------------------------------------------------- >> > > For more information on Linux on System z, visit >> > > http://wiki.linuxvm.org/ >> > > >> > > ---------------------------------------------------------------------- >> > > For LINUX-390 subscribe / signoff / archive access instructions, >> > > send email to lists...@vm.marist.edu with the message: INFO LINUX-390 >> or >> > > visit >> > > http://www.marist.edu/htbin/wlvindex?LINUX-390 >> > > ---------------------------------------------------------------------- >> > > For more information on Linux on System z, visit >> > > http://wiki.linuxvm.org/ >> > > >> > >> > ---------------------------------------------------------------------- >> > For LINUX-390 subscribe / signoff / archive access instructions, >> > send email to lists...@vm.marist.edu with the message: INFO LINUX-390 >> or >> > visit >> > http://www.marist.edu/htbin/wlvindex?LINUX-390 >> > ---------------------------------------------------------------------- >> > For more information on Linux on System z, visit >> > http://wiki.linuxvm.org/ >> > >> > ---------------------------------------------------------------------- >> > For LINUX-390 subscribe / signoff / archive access instructions, >> > send email to lists...@vm.marist.edu with the message: INFO LINUX-390 >> or >> > visit >> > http://www.marist.edu/htbin/wlvindex?LINUX-390 >> > ---------------------------------------------------------------------- >> > For more information on Linux on System z, visit >> > http://wiki.linuxvm.org/ >> > >> >> ---------------------------------------------------------------------- >> For LINUX-390 subscribe / signoff / archive access instructions, >> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or >> visit >> http://www.marist.edu/htbin/wlvindex?LINUX-390 >> ---------------------------------------------------------------------- >> For more information on Linux on System z, visit >> http://wiki.linuxvm.org/ >> >> ---------------------------------------------------------------------- >> For LINUX-390 subscribe / signoff / archive access instructions, >> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or >> visit >> http://www.marist.edu/htbin/wlvindex?LINUX-390 >> ---------------------------------------------------------------------- >> For more information on Linux on System z, visit >> http://wiki.linuxvm.org/ >> > > ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 ---------------------------------------------------------------------- For more information on Linux on System z, visit http://wiki.linuxvm.org/
