Thanks for the information, that explains it. The vpaes-x86 module isn't included in the FIPS module.
The CPU information is: model name : Intel(R) Core(TM) i7 CPU Q 720 @ 1.60GHz On 05/11/2012 09:07 AM, Andy Polyakov wrote: >> Is AES performance expected to be much lower when using the FIPS 2.0 >> Object Module? > Which CPU? You said it's non-AES-NI-capable, but is it SSSE3-capable? If > yes, then see "related note" at > http://www.mail-archive.com/openssl-dev@openssl.org/msg29827.html. > >> Below are the speed results when using AES-128-CBC with >> and w/o the FIPS module. The host system is 32-bit Linux using gcc >> 4.4.3. The host system does not have AES-NI support. No additional >> config arguments were used other than 'fipscanisteronly' for building >> the FIPS module and 'fips' for building 1.0.1b. >> >> $ ./openssl speed -evp aes-128-cbc >> OpenSSL 1.0.1b-fips 26 Apr 2012 >> type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 >> bytes >> aes-128-cbc 73739.96k 90031.86k 92865.76k 95791.08k >> 95761.47k >> >> $ ./openssl speed -evp aes-128-cbc >> OpenSSL 1.0.1b 26 Apr 2012 >> compiler: gcc ... -DVPAES_ASM ... >> type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 >> bytes >> aes-128-cbc 195185.75k 242239.91k 245629.15k 243471.00k >> 250167.68k > Ratio suggests that it's Nehalem core... > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > Development Mailing List openssl-dev@openssl.org > Automated List Manager majord...@openssl.org >
<<attachment: foleyj.vcf>>
