OpenSSH performance with VIA padlock

[Jan Klod]

On Wednesday 19 November 2008 14:20:42 you wrote:
> Jan Klod wrote:
> > Hello list,
> > please spend a minute considering these facts and maybe there is
> > something to improve:
> >
> > 1) VIA Eden based board can write AES256 encrypted information on HDD at
> > > 60MB/s
> > 2) iperf shows NIC speed 69MB/s
> > 3) openssl tests have even better results
> > 4) openssh can transfer AES256 encrypted information at < 27MB/s (and
> > worse with HDD encryption)
> >
> > It is better with openssh 5.x, than 4.6, but still I see no reason why
> > results are so bad... Please, could someone explain? I don't believe,
> > padlock is used properly...
>
> Did you enable OpenSSL engine support when you built OpenSSH?
> (./configure  --with-ssl-engine).
enabled

> Try this with 5.1p1, apparently some earlier versions didn't work
> properly (I have no such hardware to test).
same ver.

> Also as someone else mentioned, try a faster MAC such as umac64.
Why should I, if I have padlock, which supports sha1/sha265?!

openssl with -engine padlock: only aes gives much better results, the rest 
remains as before.

Apparently ssl is the problem! Where should I ask?