On 6/5/16 9:40 PM, Yawning Angel wrote:
The important one is AES-128-CTR. Since you're using OpenSSL master, it should be accelerated. Versions prior to the 1.1 series do not.
Quickly skimming engines/e_padlock.c, it appears that GCM accel isn't supported, but I don't feel like looking at if that means "just a slow GHASH" or "slow everything".
I see that on GnuTLS they are optimizing GCM using the ECB part of Padlock: https://github.com/GostCrypt/GnuTLS/blob/master/lib/accelerated/x86/aes-gcm-...
Wondering if that can't be a choice also for OpenSSL/Tor to offload crypto a bit more?
Fabio