On Tue, 22 Jul 2008, Christopher Ivory wrote:
>When I ran the same test with the pkcs chip initialized ("speed sha1 -engine
>pkcs11") the results were:
>
> The 'numbers' are in 1000s of bytes per second processed.
> type 16 bytes 64 bytes 256 bytes 1024 bytes 8192
>bytes
> sha1 408.02k 1508.91k 5448.41k 15804.53k
>34058.17k
>
>This leads me to believe that while the pkcs11 might not improve the
>performance of SHA-1. Would this be a fair assessment, or am I missing
>something?
T1 has ncp(7d) which accelerates RSA/DSA/DH only, see "cryptoadm
list -m". What you see is soft token. Given the inherent overhead of the
crypto framework the soft token is slower than OpenSSL.
in OpenSolaris, there is a project that mechanisms that are not
implemented in hw will stay in the soft token.
if you want acceleration for symmetric crypto and digests you must
use T2 or SCA-6000 (which is significantly slower than n2cp that is shipped
with Niagara2).
--
Jan Pechanec
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [email protected]
Automated List Manager [EMAIL PROTECTED]
