On Fri, Feb 3, 2017 at 1:55 PM, Chris Clark <a.chris.clark@xxxxxxxxx> wrote: > My application links to OpenSSL 1.1.0 dynamically, and I would like to > be able to determine if the CPU supports the AES-NI instruction set. > Is there an OpenSSL API that can do this? Also note that even though the machine is capable of AES-NI, it does not mean OpenSSL will use the hardware acceleration. If you call AES_encrypt (and friends), then you get the "software-only" implementation. If you disable the feature in the environment with OPENSSL_ia32cap="~0x200000200000000", then you get the "software-only" implementation To use AES-NI, and other hardware accelerators like ARMv8's instructions, you have to use the EVP interface. Jeff -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users