[Bug 1001424] Re: openssl without Intel AES-NI engine support

[Yann Rouillard]

>From what I know, there is no more aes-ni engine in openssl 1.0.1 as it
is directly implemented at the EVP layer.

See https://rt.openssl.org/Ticket/Display.html?user=guest&pass=guest&id=2619
and http://cvs.openssl.org/chngview?cn=21519

You should launch the command "openssl -evp aes-256-cbc" and check if
the performance are good.

Yann

** Bug watch added: OpenSSL RT #2619
   http://rt.openssl.org/Ticket/Display.html?id=2619

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssl in Ubuntu.
https://bugs.launchpad.net/bugs/1001424

Title:
  openssl without Intel AES-NI engine support

Status in “openssl” package in Ubuntu:
  Confirmed

Bug description:
  Hi

  testing hardware encryption acceleration for an ongoing project  I
  found out that the shipped openssl version is shipped without Intel
  AES-NI engine support.

  openssl engine
  (rsax) RSAX engine support
  (dynamic) Dynamic engine loading support

  whereas an Intel AES-NI enabled openssl will show an additional
  (aesni) Intel AES-NI engine

  However as the shipped kernel offer hardware support via aesni_intel
  it will be really great if Intel AES-NI engine support can be enabled
  in openssl too.

  1. )System: Ubuntu 12.04 LTS
  Release: 12.04

  2.) openssl: Installed: 1.0.1-4ubuntu5

  3.) Please enable support for Intel AES-NI engine in openssl

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: openssl 1.0.1-4ubuntu5
  ProcVersionSignature: Ubuntu 3.2.0-24.37-generic 3.2.14
  Uname: Linux 3.2.0-24-generic x86_64
  ApportVersion: 2.0.1-0ubuntu7
  Architecture: amd64
  Date: Fri May 18 22:02:27 2012
  InstallationMedia: Ubuntu 12.04 LTS "Precise Pangolin" - Release amd64 (20120425)
  ProcEnviron:
   LANGUAGE=en_US:en
   TERM=xterm
   PATH=(custom, user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: openssl
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1001424/+subscriptions