On Mon, May 11, 2015 at 07:24:10AM +0200, Patrick Proniewski wrote: > I've compiled OpenSSL 1.0.2a on Mac OS X 10.6.8, and used `openssl > speed` to compare performances with stock OpenSSL (0.9.8). In many > tests, 1.0.2a is a bit faster, or as fast as 0.9.8y, but on the 6 > AES tests, the old one is almost twice as fast as the new one: Use "openssl speed -evp". Then if your hardware has AES-NI, it will be faster in 1.0.2. Otherwise, the slowdown is expected. The software-only AES in 1.0.x is constant-time, and avoids timing side-channel attacks. The 0.9.8 version is not constant time (faster, but less secure). -- Viktor.
