openbsd/src/lib/libcrypto/engine, branch OPENBSD_3_6_BASE A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_3_6_BASE 2004-09-07T13:47:08+00:00 This commit was manufactured by cvs2git to create tag 'OPENBSD_3_6_BASE'. 2004-09-07T13:47:08+00:00 cvs2svn admin@example.com 2004-09-07T13:47:08+00:00 urn:sha1:86583d7d10a19466b6f2bf9f08e4c59ef07f4150 machdep.xcrypt now has a different meaning: Instead of > 0 indicating 2004-06-15T23:41:49+00:00 deraadt 2004-06-15T23:41:49+00:00 urn:sha1:b77305065be9ea8af14bd6792e1852ab5e957fcb that AES is there, we now have 3 flag bits: C3_HAS_AES, C3_HAS_SHA (SHA1 & SHA256), and C3_HAS_MM (RSA). Change this code to only look at C3_HAS_AES for now. merge 0.9.7d 2004-04-08T08:03:15+00:00 markus 2004-04-08T08:03:15+00:00 urn:sha1:40d673554117d24c9f46be721235d3e302c06e04 remove some debug code and cleanup.. 2004-02-04T21:31:10+00:00 deraadt 2004-02-04T21:31:10+00:00 urn:sha1:acb76436eeac44bb2432cf37441f3eba95b589a5 OK, this time the AES soft keys work with ssh and such. I spent over 3 2004-02-03T23:44:47+00:00 deraadt 2004-02-03T23:44:47+00:00 urn:sha1:9237b96b4b1795a66946df726fe5d1f0af5380ad hours learning that OpenSSL's internal functions for AES extended keys generate screwy byte order swapped data.. oops, software key gen bug 2004-02-03T20:26:30+00:00 deraadt 2004-02-03T20:26:30+00:00 urn:sha1:1ba14a455dca5aaaef6b0e94a5488fbfee768297 Switch to using software generated extended keys (because the cpu cannot 2004-02-03T20:18:45+00:00 deraadt 2004-02-03T20:18:45+00:00 urn:sha1:0c66a6c2b7500acc336803ba43c73d3cc11d5939 yet generate 192 & 256 bit keys). Ensure that 192 and 256 are in the nids table. This also accelerates performance for 128 a tiny bit: type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-128-cbc 34921.48k 129617.82k 362059.93k 623649.81k 790397.77k aes-192-cbc 26227.43k 99215.33k 283242.84k 509881.15k 665323.22k aes-256-cbc 26133.22k 97458.06k 265990.84k 457824.69k 579835.09k If on an i386, detect existance of the VIA C3 xcrypt-* using sysctl of 2004-02-03T08:48:26+00:00 deraadt 2004-02-03T08:48:26+00:00 urn:sha1:b6361823f347e3fac478dfe9ca17ff60e7ffd362 the machdep.xcrypt node. If they exist, use the xcrypt-cbc instruction to accelerate aes-{128,192,256}-cbc, for more than 100x performance increase. This code has no effect on any cpu... Tested thus far using openssl speed command, and of course, ssh. 778MB/sec AES-128-CBC performance at 8192 byte block size. remove obsolete files 2003-11-13T15:18:31+00:00 markus 2003-11-13T15:18:31+00:00 urn:sha1:56f777457f24d2899caf9b29a79285b5753e3e9b merge 0.9.7c; minor bugsfixes; 2003-11-11T22:15:20+00:00 markus 2003-11-11T22:15:20+00:00 urn:sha1:38a053f575d6faf05903707a8e835dc231c7eca9 API addition: ERR_release_err_state_table [make includes before you build libssl/libcrypto]