Difference between revisions of "Artigo a2000"

From ArchWiki
Jump to: navigation, search
(Created page with "Getting padlock to work: (please feel free to help with the formatting of the page. I dont wiki often) Add to /etc/modprobe.d/modprobe.conf: {{Box BLUE|$|alias aes padlock}} B...")
 
(3 intermediate revisions by 3 users not shown)
Line 1: Line 1:
 +
[[Category:Storage]]
 +
{{Stub}}
 +
 +
Note:
 +
If you issue the command:
 +
openssl engine padlock
 +
 +
You will probably get this in return:
 +
(padlock) VIA PadLock (no-RNG, ACE)
 +
 +
From what I have read this deals with VIA's RNG being a bit buggy or insecure or something.
 +
 
Getting padlock to work: (please feel free to help with the formatting of the page. I dont wiki often)
 
Getting padlock to work: (please feel free to help with the formatting of the page. I dont wiki often)
 
  
 
Add to /etc/modprobe.d/modprobe.conf:
 
Add to /etc/modprobe.d/modprobe.conf:
{{Box BLUE|$|alias aes padlock}}
+
$ alias aes padlock
  
 
Benchmarks without padlock (3 runs):
 
Benchmarks without padlock (3 runs):
{{Box BLUE|$|openssl speed -evp aes-128-cbc}}
+
$ openssl speed -evp aes-128-cbc
  
 
Output:
 
Output:
{{Box BLUE|$|OpenSSL 1.0.0e 6 Sep 2011<br>
+
{{bc|$ OpenSSL 1.0.0e 6 Sep 2011
built on: Tue Sep  6 17:15:38 UTC 2011<br>
+
built on: Tue Sep  6 17:15:38 UTC 2011
type            16 bytes    64 bytes    256 bytes    1024 bytes  8192 bytes<br>
+
type            16 bytes    64 bytes    256 bytes    1024 bytes  8192 bytes
aes-128-cbc      10936.73k    11720.66k    11994.71k    23021.57k    23194.28k<br>
+
aes-128-cbc      10936.73k    11720.66k    11994.71k    23021.57k    23194.28k
aes-128-cbc      10792.41k    11681.17k    11985.58k    23021.91k    23197.01k<br>
+
aes-128-cbc      10792.41k    11681.17k    11985.58k    23021.91k    23197.01k
 
aes-128-cbc      10791.26k    11642.79k    11980.71k    23022.59k    23197.01k}}
 
aes-128-cbc      10791.26k    11642.79k    11980.71k    23022.59k    23197.01k}}
  
 
Add to /etc/ssl/openssl.cnf (before [new_oids] section):
 
Add to /etc/ssl/openssl.cnf (before [new_oids] section):
  
 
+
openssl_conf = openssl_def
openssl_conf = openssl_def<br>
+
 
+
[openssl_def]
[openssl_def]<br>
+
engines = openssl_engines
engines = openssl_engines<br>
+
 
+
[openssl_engines]
[openssl_engines]<br>
+
padlock = padlock_engine
padlock = padlock_engine<br>
+
 
+
[padlock_engine]
[padlock_engine]<br>
+
default_algorithms = ALL
default_algorithms = ALL<br>
+
 
+
 
+
 
+
 
after padlock (3 runs):
 
after padlock (3 runs):
{{Box BLUE|$|type            16 bytes    64 bytes    256 bytes  1024 bytes  8192 bytes<br>
+
{{bc|$ type            16 bytes    64 bytes    256 bytes  1024 bytes  8192 bytes
aes-128-cbc      58133.80k  143263.17k  234075.05k  297064.11k  342171.65k<br>
+
aes-128-cbc      58133.80k  143263.17k  234075.05k  297064.11k  342171.65k
aes-128-cbc      58162.57k  142958.08k  234077.53k  296989.70k  341712.90k<br>
+
aes-128-cbc      58162.57k  142958.08k  234077.53k  296989.70k  341712.90k
 
aes-128-cbc      58151.15k  143278.68k  234072.58k  297020.42k  342166.19k}}
 
aes-128-cbc      58151.15k  143278.68k  234072.58k  297020.42k  342166.19k}}

Revision as of 15:47, 13 June 2012

Tango-document-new.pngThis article is a stub.Tango-document-new.png

Notes: please use the first argument of the template to provide more detailed indications. (Discuss in Talk:Artigo a2000#)

Note: If you issue the command: openssl engine padlock

You will probably get this in return: (padlock) VIA PadLock (no-RNG, ACE)

From what I have read this deals with VIA's RNG being a bit buggy or insecure or something.

Getting padlock to work: (please feel free to help with the formatting of the page. I dont wiki often)

Add to /etc/modprobe.d/modprobe.conf:

$ alias aes padlock

Benchmarks without padlock (3 runs):

$ openssl speed -evp aes-128-cbc

Output:

$ OpenSSL 1.0.0e 6 Sep 2011
built on: Tue Sep  6 17:15:38 UTC 2011
type             16 bytes     64 bytes     256 bytes    1024 bytes   8192 bytes
aes-128-cbc      10936.73k    11720.66k    11994.71k    23021.57k    23194.28k
aes-128-cbc      10792.41k    11681.17k    11985.58k    23021.91k    23197.01k
aes-128-cbc      10791.26k    11642.79k    11980.71k    23022.59k    23197.01k

Add to /etc/ssl/openssl.cnf (before [new_oids] section):

openssl_conf = openssl_def

[openssl_def]
engines = openssl_engines

[openssl_engines]
padlock = padlock_engine

[padlock_engine]
default_algorithms = ALL

after padlock (3 runs):

$ type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-128-cbc      58133.80k   143263.17k   234075.05k   297064.11k   342171.65k
aes-128-cbc      58162.57k   142958.08k   234077.53k   296989.70k   341712.90k
aes-128-cbc      58151.15k   143278.68k   234072.58k   297020.42k   342166.19k