openbsd/src/lib/libcrypto/engine, branch OPENBSD_3_5_BASE A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_3_5_BASE 2004-03-22T14:57:04+00:00 This commit was manufactured by cvs2git to create tag 'OPENBSD_3_5_BASE'. 2004-03-22T14:57:04+00:00 cvs2svn admin@example.com 2004-03-22T14:57:04+00:00 urn:sha1:8e32b76f8c63e27a8c61f3e7d76a05ce1f419061 remove some debug code and cleanup.. 2004-02-04T21:31:10+00:00 deraadt 2004-02-04T21:31:10+00:00 urn:sha1:acb76436eeac44bb2432cf37441f3eba95b589a5 OK, this time the AES soft keys work with ssh and such. I spent over 3 2004-02-03T23:44:47+00:00 deraadt 2004-02-03T23:44:47+00:00 urn:sha1:9237b96b4b1795a66946df726fe5d1f0af5380ad hours learning that OpenSSL's internal functions for AES extended keys generate screwy byte order swapped data.. oops, software key gen bug 2004-02-03T20:26:30+00:00 deraadt 2004-02-03T20:26:30+00:00 urn:sha1:1ba14a455dca5aaaef6b0e94a5488fbfee768297 Switch to using software generated extended keys (because the cpu cannot 2004-02-03T20:18:45+00:00 deraadt 2004-02-03T20:18:45+00:00 urn:sha1:0c66a6c2b7500acc336803ba43c73d3cc11d5939 yet generate 192 & 256 bit keys). Ensure that 192 and 256 are in the nids table. This also accelerates performance for 128 a tiny bit: type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-128-cbc 34921.48k 129617.82k 362059.93k 623649.81k 790397.77k aes-192-cbc 26227.43k 99215.33k 283242.84k 509881.15k 665323.22k aes-256-cbc 26133.22k 97458.06k 265990.84k 457824.69k 579835.09k If on an i386, detect existance of the VIA C3 xcrypt-* using sysctl of 2004-02-03T08:48:26+00:00 deraadt 2004-02-03T08:48:26+00:00 urn:sha1:b6361823f347e3fac478dfe9ca17ff60e7ffd362 the machdep.xcrypt node. If they exist, use the xcrypt-cbc instruction to accelerate aes-{128,192,256}-cbc, for more than 100x performance increase. This code has no effect on any cpu... Tested thus far using openssl speed command, and of course, ssh. 778MB/sec AES-128-CBC performance at 8192 byte block size. remove obsolete files 2003-11-13T15:18:31+00:00 markus 2003-11-13T15:18:31+00:00 urn:sha1:56f777457f24d2899caf9b29a79285b5753e3e9b merge 0.9.7c; minor bugsfixes; 2003-11-11T22:15:20+00:00 markus 2003-11-11T22:15:20+00:00 urn:sha1:38a053f575d6faf05903707a8e835dc231c7eca9 API addition: ERR_release_err_state_table [make includes before you build libssl/libcrypto] support AES with 192 and 256 bit keys, too. 2003-08-07T16:27:47+00:00 markus 2003-08-07T16:27:47+00:00 urn:sha1:ff3a9648adf246b203b1cd4fa18e0185786f5c89 tested with kern.cryptodevallowsoft=1; ok deraadt@ nuke term 3, since we're all in ~deraadt/terms and I clued in now. 2003-06-03T15:57:44+00:00 beck 2003-06-03T15:57:44+00:00 urn:sha1:eebf8d0ed9ba23e24d607c670d8f8743c338bf38