Hi, I was looking at the AES-NI support in 1.0.1, and it seems that it now has been merged in EVP (but test/test_aesni still exists in HEAD).
This has the following effect: 1.0.0h: $ openssl speed aes-128-cbc: type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-128 cbc 111674.69k 120920.21k 122711.55k 123594.40k 123838.46k $ openssl speed -evp aes-128-cbc: type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-128-cbc 105414.17k 117243.11k 121730.48k 122459.48k 122776.23k 1.0.1: $ openssl speed aes-128-cbc: type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-128 cbc 110450.10k 120831.36k 122216.11k 123465.05k 123909.46k $ openssl speed -evp aes-128-cbc: type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-128-cbc 669703.39k 709092.05k 721489.25k 714057.39k 724320.26k So if you directly use the AES API you used to have a little better performance, but now you don't get the AES-NI support and so are a factor slower when using it. Is this the normal and expected behaviour? Kurt ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager majord...@openssl.org
