openbsd/src/lib/libcrypto/engine, branch OPENBSD_3_7 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_3_7 2005-03-12T00:02:09+00:00 This commit was manufactured by cvs2git to create branch 'OPENBSD_3_7'. 2005-03-12T00:02:09+00:00 cvs2svn admin@example.com 2005-03-12T00:02:09+00:00 urn:sha1:ab475d6c082063be3cdaf2f91789c785c1b95f57 adjust comment, open_dev_crypto() returns -1 on error. 2005-01-29T16:55:23+00:00 hshoexer 2005-01-29T16:55:23+00:00 urn:sha1:44248d3f5723370a5a0db73e91e775427c9e9ebc ok markus@ on error set correct pointer to NULL. 2005-01-26T14:34:44+00:00 hshoexer 2005-01-26T14:34:44+00:00 urn:sha1:3cbef931ad6575685450ab8fb4a6786014a7cbe5 From phk@freebsd.org ok markus@ machdep.xcrypt now has a different meaning: Instead of > 0 indicating 2004-06-15T23:41:49+00:00 deraadt 2004-06-15T23:41:49+00:00 urn:sha1:b77305065be9ea8af14bd6792e1852ab5e957fcb that AES is there, we now have 3 flag bits: C3_HAS_AES, C3_HAS_SHA (SHA1 & SHA256), and C3_HAS_MM (RSA). Change this code to only look at C3_HAS_AES for now. merge 0.9.7d 2004-04-08T08:03:15+00:00 markus 2004-04-08T08:03:15+00:00 urn:sha1:40d673554117d24c9f46be721235d3e302c06e04 remove some debug code and cleanup.. 2004-02-04T21:31:10+00:00 deraadt 2004-02-04T21:31:10+00:00 urn:sha1:acb76436eeac44bb2432cf37441f3eba95b589a5 OK, this time the AES soft keys work with ssh and such. I spent over 3 2004-02-03T23:44:47+00:00 deraadt 2004-02-03T23:44:47+00:00 urn:sha1:9237b96b4b1795a66946df726fe5d1f0af5380ad hours learning that OpenSSL's internal functions for AES extended keys generate screwy byte order swapped data.. oops, software key gen bug 2004-02-03T20:26:30+00:00 deraadt 2004-02-03T20:26:30+00:00 urn:sha1:1ba14a455dca5aaaef6b0e94a5488fbfee768297 Switch to using software generated extended keys (because the cpu cannot 2004-02-03T20:18:45+00:00 deraadt 2004-02-03T20:18:45+00:00 urn:sha1:0c66a6c2b7500acc336803ba43c73d3cc11d5939 yet generate 192 & 256 bit keys). Ensure that 192 and 256 are in the nids table. This also accelerates performance for 128 a tiny bit: type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-128-cbc 34921.48k 129617.82k 362059.93k 623649.81k 790397.77k aes-192-cbc 26227.43k 99215.33k 283242.84k 509881.15k 665323.22k aes-256-cbc 26133.22k 97458.06k 265990.84k 457824.69k 579835.09k If on an i386, detect existance of the VIA C3 xcrypt-* using sysctl of 2004-02-03T08:48:26+00:00 deraadt 2004-02-03T08:48:26+00:00 urn:sha1:b6361823f347e3fac478dfe9ca17ff60e7ffd362 the machdep.xcrypt node. If they exist, use the xcrypt-cbc instruction to accelerate aes-{128,192,256}-cbc, for more than 100x performance increase. This code has no effect on any cpu... Tested thus far using openssl speed command, and of course, ssh. 778MB/sec AES-128-CBC performance at 8192 byte block size.