Artigo a2000

From ArchWiki
Revision as of 12:40, 24 November 2011 by Kynikos (Talk | contribs) (just some quick fixes, but seems to require more)

Jump to: navigation, search

This template has only maintenance purposes. For linking to local translations please use interlanguage links, see Help:i18n#Interlanguage links.


Local languages: Català – Dansk – English – Español – Esperanto – Hrvatski – Indonesia – Italiano – Lietuviškai – Magyar – Nederlands – Norsk Bokmål – Polski – Português – Slovenský – Česky – Ελληνικά – Български – Русский – Српски – Українська – עברית – العربية – ไทย – 日本語 – 正體中文 – 简体中文 – 한국어


External languages (all articles in these languages should be moved to the external wiki): Deutsch – Français – Română – Suomi – Svenska – Tiếng Việt – Türkçe – فارسی

Tango-document-new.pngThis article is a stub.Tango-document-new.png

Notes: please use the first argument of the template to provide more detailed indications. (Discuss in Talk:Artigo a2000#)

Note: If you issue the command: openssl engine padlock

You will probably get this in return: (padlock) VIA PadLock (no-RNG, ACE)

From what I have read this deals with VIA's RNG being a bit buggy or insecure or something.

Getting padlock to work: (please feel free to help with the formatting of the page. I dont wiki often)

Add to /etc/modprobe.d/modprobe.conf:

$ alias aes padlock

Benchmarks without padlock (3 runs):

$ openssl speed -evp aes-128-cbc

Output:

$ OpenSSL 1.0.0e 6 Sep 2011
built on: Tue Sep  6 17:15:38 UTC 2011
type             16 bytes     64 bytes     256 bytes    1024 bytes   8192 bytes
aes-128-cbc      10936.73k    11720.66k    11994.71k    23021.57k    23194.28k
aes-128-cbc      10792.41k    11681.17k    11985.58k    23021.91k    23197.01k
aes-128-cbc      10791.26k    11642.79k    11980.71k    23022.59k    23197.01k

Add to /etc/ssl/openssl.cnf (before [new_oids] section):

openssl_conf = openssl_def

[openssl_def]
engines = openssl_engines

[openssl_engines]
padlock = padlock_engine

[padlock_engine]
default_algorithms = ALL

after padlock (3 runs):

$ type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-128-cbc      58133.80k   143263.17k   234075.05k   297064.11k   342171.65k
aes-128-cbc      58162.57k   142958.08k   234077.53k   296989.70k   341712.90k
aes-128-cbc      58151.15k   143278.68k   234072.58k   297020.42k   342166.19k