OpenSSH performance with VIA padlock
janklodvan at gmail.com
Thu Nov 20 01:10:27 EST 2008
On Wednesday 19 November 2008 14:20:42 you wrote:
> Jan Klod wrote:
> > Hello list,
> > please spend a minute considering these facts and maybe there is
> > something to improve:
> > 1) VIA Eden based board can write AES256 encrypted information on HDD at
> > > 60MB/s
> > 2) iperf shows NIC speed 69MB/s
> > 3) openssl tests have even better results
> > 4) openssh can transfer AES256 encrypted information at < 27MB/s (and
> > worse with HDD encryption)
> > It is better with openssh 5.x, than 4.6, but still I see no reason why
> > results are so bad... Please, could someone explain? I don't believe,
> > padlock is used properly...
> Did you enable OpenSSL engine support when you built OpenSSH?
> (./configure --with-ssl-engine).
> Try this with 5.1p1, apparently some earlier versions didn't work
> properly (I have no such hardware to test).
> Also as someone else mentioned, try a faster MAC such as umac64.
Why should I, if I have padlock, which supports sha1/sha265?!
openssl with -engine padlock: only aes gives much better results, the rest
remains as before.
Apparently ssl is the problem! Where should I ask?
More information about the openssh-unix-dev