Hi,
I want to use the "hardware accel" feature with the actual tor alpha version 0.2.3.12-alpha1. My CPUs support the Intel AES NI function and the kernel module is enabled and running well.
Im running OpenSSL 1.0.1, the debian dev told me that there is no dynamic loadable aes ni shipped though its supporting th function. Im pretty confused about the options int the torrc right now.
I have enabled "hardware accel" but did not define any dynamic loadable engine anymore because there is no one according to the debian dev and also the output from "openssl engine". The debug log does not show any enabled aes / evp functions what so ever.
Im stuck right now, does anybody have some advice, woudl be awesome ;-) ?
Thanks
On Mar 31, 2012, at 9:32 PM, Sebastian Urbach wrote:
Hi,
I want to use the "hardware accel" feature with the actual tor alpha version 0.2.3.12-alpha1. My CPUs support the Intel AES NI function and the kernel module is enabled and running well.
Im running OpenSSL 1.0.1, the debian dev told me that there is no dynamic loadable aes ni shipped though its supporting th function. Im pretty confused about the options int the torrc right now.
I have enabled "hardware accel" but did not define any dynamic loadable engine anymore because there is no one according to the debian dev and also the output from "openssl engine". The debug log does not show any enabled aes / evp functions what so ever.
Im stuck right now, does anybody have some advice, woudl be awesome ;-) ?
Thanks
the situation is indeed a bit confusing with openssl 1.0.1. Aesni isn't a module anymore, so the hardware accel options no longer apply. Tor master (not yet in any released version) automatically makes use of aesni as supported by openssl 1.0.1, so either upgrade to recent git or wait for the next release.
You'll then gain support automatically.
CC'ing Nick here to sanity-check my understanding, I haven't been following development too much in the past few days :/
Am Sat, 31 Mar 2012 21:52:16 +0200 schrieb Sebastian Hahn mail@sebastianhahn.net:
Hi Sebastian,
And no, im not talking with myself ;-)
the situation is indeed a bit confusing with openssl 1.0.1. Aesni isn't a module anymore, so the hardware accel options no longer apply. Tor master (not yet in any released version) automatically makes use of aesni as supported by openssl 1.0.1, so either upgrade to recent git or wait for the next release.
You'll then gain support automatically.
Thank you very much for this short info indeed. Do you know if this applies to the released 0.3.13-alpha version from the 26th of March ? I did not find any clues in the changelog so im assuming this feature will be part of the next release ?
Thanks for your help.
On Apr 1, 2012, at 2:22 PM, Sebastian Urbach wrote:
Hi Sebastian,
oh hai.
Do you know if this applies to the released 0.3.13-alpha version from the 26th of March ?
It does not, that's why I said it isn't in any released version of tor. The next one should contain it, until then you're forced to build from source.
tor-relays@lists.torproject.org
-
Sebastian Hahn -
Sebastian Urbach