Hello :-)
Patrick Lamaizière schrieb:
> Le Sun, 19 Oct 2008 18:19:20 +0200,
> Andreas Gerlich <[EMAIL PROTECTED]> a écrit :
>
>> I experiment with encrypted partitions (cryptsetup, luks:
>> aes-cbc-essiv:sha256, keylength 256 bit) with or without the geode-AES
>> engine. The result of my tests ist that when I NOT load
>> the "geode-aes" module (then the module "aes-i586" is used) the
>> encryption/decryption is a little bit faster than with the geode-aes
>> module
>
> On the Geode, the AES engine handles only AES keys of length == 128
> bits.
Now, crypto-options: aes-cbc-essiv:sha256, keysize=128
^^^^^^^^^^^
command: time dd if=/dev/zero of=xxx.img bs=1024 count=700000
without goede-aes (128 Bit keylength) 1m40.313s, 1m44.596s, 1m43.717s
with geode-aes (128 Bit keylength) 36.792s, 37.774s, 37.552s
command: time cat 700MB-file >/dev/null
without geode-aes (128 Bit keylength) 1m35.057s, 1m36.257s, 1m36.587s
with geode-aes (128 Bit keylength): 32.546s, 32.656s, 32.653s
That's a considerable difference !!! :-)
Thank you for the tip Patrick ;-)
Now the machine have a constant network trafic and it idles
between 60-80% (with geode-aes).
Bevor (or without the geode-aes module) the kernel-crypto-daemon
("kcryptd") needs 100% cpu time and the network traffic braeks in
again and again.
Regards
Andreas
--
Andreas G., University of Ulm, Germany
open source project --> http://yaze-ag.de/ (Yet Another Z80 Emulator)
_______________________________________________
Soekris-tech mailing list
[email protected]
http://lists.soekris.com/mailman/listinfo/soekris-tech
