hardware
========
Jetway J7F4K1G2
cpu: Via Eden C7 1200 MHz
chipset: VIA CN700 + 8237RP
ram: 512 MB DDR2-533
software
========
Debian Etch
Linux debian 2.6.18-4-686 #1 SMP Mon Mar 26 17:17:36 UTC 2007 i686 GNU/Linux
loop(-aes) module rebuilt with support for via padlock hardware encryption
openssl 0.9.8c rebuilt with Michal Ludvig's padlock patches
performance test results
========================
# ramdisk
debian:~# dd if=/dev/zero of=/dev/ram1 bs=1M count=50
50+0 Datensätze ein
50+0 Datensätze aus
52428800 Bytes (52 MB) kopiert, 0,0977001 Sekunden, 537 MB/s
# simple loop
debian:~# losetup /dev/loop0 /dev/ram1
debian:~# dd if=/dev/zero of=/dev/loop0 bs=1M count=50
50+0 Datensätze ein
50+0 Datensätze aus
52428800 Bytes (52 MB) kopiert, 0,379721 Sekunden, 138 MB/s
debian:~# losetup -d /dev/loop0
# loop-aes: AES-128
debian:~# losetup -e AES128 -H random /dev/loop0 /dev/ram1
debian:~# dd if=/dev/zero of=/dev/loop0 bs=1M count=50
50+0 Datensätze ein
50+0 Datensätze aus
52428800 Bytes (52 MB) kopiert, 0,93555 Sekunden, 56,0 MB/s
debian:~# losetup -d /dev/loop0
# loop-aes: AES-256
debian:~# losetup -e AES256 -H random /dev/loop0 /dev/ram1
debian:~# dd if=/dev/zero of=/dev/loop0 bs=1M count=50
50+0 Datensätze ein
50+0 Datensätze aus
52428800 Bytes (52 MB) kopiert, 0,953818 Sekunden, 55,0 MB/s
# dm-crypt: AES-128
debian:~# modprobe padlock
debian:~# cryptsetup create dm-test /dev/ram1 --cipher
aes-cbc-essiv:sha256 -s 128
Enter passphrase:
debian:~# dd if=/dev/zero of=/dev/mapper/dm-test bs=1M count=50
50+0 Datensätze ein
50+0 Datensätze aus
52428800 Bytes (52 MB) kopiert, 0,554618 Sekunden, 94,5 MB/s
debian:~# cryptsetup remove dm-test
# dm-crypt: AES-256
debian:~# cryptsetup create dm-test /dev/ram1 --cipher
aes-cbc-essiv:sha256 -s 256
Enter passphrase:
debian:~# dd if=/dev/zero of=/dev/mapper/dm-test bs=1M count=50
50+0 Datensätze ein
50+0 Datensätze aus
52428800 Bytes (52 MB) kopiert, 0,560215 Sekunden, 93,6 MB/s
# openssl speed test: AES-128
debian:~# openssl speed -evp aes-128-cbc -engine padlock
engine "padlock" set.
Doing aes-128-cbc for 3s on 16 size blocks: 8799069 aes-128-cbc's in 3.01s
Doing aes-128-cbc for 3s on 64 size blocks: 5274283 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 256 size blocks: 2049811 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 1024 size blocks: 648022 aes-128-cbc's in 3.01s
Doing aes-128-cbc for 3s on 8192 size blocks: 94270 aes-128-cbc's in 3.00s
OpenSSL 0.9.8c 05 Sep 2006
built on: Thu Nov 30 22:28:56 UTC 2006
options:bn(64,32) md2(int) rc4(idx,int) des(ptr,risc1,16,long)
aes(partial) blowfish(idx)
compiler: gcc -fPIC -DOPENSSL_PIC -DZLIB -DOPENSSL_THREADS -D_REENTRANT
-DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTERMIO -O3 -march=i686
-Wa,--noexecstack -g -Wall -DOPENSSL_BN_ASM_PART_WORDS
-DOPENSSL_IA32_SSE2 -DSHA1_ASM -DMD5_ASM -DRMD160_ASM -DAES_ASM
available timing options: TIMES TIMEB HZ=100 [sysconf value]
timing function used: times
The 'numbers' are in 1000s of bytes per second processed.
type 16 bytes 64 bytes 256 bytes 1024 bytes 8192
bytes
aes-128-cbc 46772.46k 112518.04k 174917.21k 220456.65k
257419.95k
# openssl speed test: AES-256
debian:~# openssl speed -evp aes-256-cbc -engine padlock
engine "padlock" set.
Doing aes-256-cbc for 3s on 16 size blocks: 8651358 aes-256-cbc's in 3.01s
Doing aes-256-cbc for 3s on 64 size blocks: 5130751 aes-256-cbc's in 3.00s
Doing aes-256-cbc for 3s on 256 size blocks: 1916758 aes-256-cbc's in 3.00s
Doing aes-256-cbc for 3s on 1024 size blocks: 596974 aes-256-cbc's in 3.01s
Doing aes-256-cbc for 3s on 8192 size blocks: 85597 aes-256-cbc's in 3.00s
OpenSSL 0.9.8c 05 Sep 2006
built on: Thu Nov 30 22:28:56 UTC 2006
options:bn(64,32) md2(int) rc4(idx,int) des(ptr,risc1,16,long)
aes(partial) blowfish(idx)
compiler: gcc -fPIC -DOPENSSL_PIC -DZLIB -DOPENSSL_THREADS -D_REENTRANT
-DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTERMIO -O3 -march=i686
-Wa,--noexecstack -g -Wall -DOPENSSL_BN_ASM_PART_WORDS
-DOPENSSL_IA32_SSE2 -DSHA1_ASM -DMD5_ASM -DRMD160_ASM -DAES_ASM
available timing options: TIMES TIMEB HZ=100 [sysconf value]
timing function used: times
The 'numbers' are in 1000s of bytes per second processed.
type 16 bytes 64 bytes 256 bytes 1024 bytes 8192
bytes
aes-256-cbc 45987.29k 109456.02k 163563.35k 203090.16k
233736.87k
Can anybody tell me why the loop device is so slow even without encryption?
Compared to the openssl speed test the results for both loop-aes and
dm-crypt
don't look very good.
-
Linux-crypto: cryptography in and on the Linux system
Archive: http://mail.nl.linux.org/linux-crypto/
