PandoraBox IPQ40xx OpenSSL硬件加密测试

lin***

             今天在调试IPQ40xx的HWCrypto,顺便做了一个OpenSSL的性能测试.

IPQ40xx支持的HWCrypto:
[ 3500.415466] qcrypto 8e20000.qcrypto: qcrypto-ecb-aes
[ 3500.419550] qcrypto 8e20000.qcrypto: qcrypto-cbc-aes
[ 3500.424664] qcrypto 8e20000.qcrypto: qcrypto-ctr-aes
[ 3500.429443] qcrypto 8e20000.qcrypto: qcrypto-ecb-des
[ 3500.434376] qcrypto 8e20000.qcrypto: qcrypto-cbc-des
[ 3500.439323] qcrypto 8e20000.qcrypto: qcrypto-ecb-3des
[ 3500.444347] qcrypto 8e20000.qcrypto: qcrypto-cbc-3des
[ 3500.449383] qcrypto 8e20000.qcrypto: qcrypto-xts-aes
[ 3500.454328] qcrypto 8e20000.qcrypto: qcrypto-sha1
[ 3500.459071] qcrypto 8e20000.qcrypto: qcrypto-sha256
[ 3500.463892] qcrypto 8e20000.qcrypto: qcrypto-aead-hmac-sha1-cbc-aes
[ 3500.470131] qcrypto 8e20000.qcrypto: qcrypto-aead-hmac-sha1-cbc-des
[ 3500.476385] qcrypto 8e20000.qcrypto: qcrypto-aead-hmac-sha1-cbc-3des
[ 3500.482711] qcrypto 8e20000.qcrypto: qcrypto-aead-hmac-sha256-cbc-aes
[ 3500.489153] qcrypto 8e20000.qcrypto: qcrypto-aead-hmac-sha256-cbc-des
[ 3500.495567] qcrypto 8e20000.qcrypto: qcrypto-aead-hmac-sha256-cbc-3des
[ 3500.502069] qcrypto 8e20000.qcrypto: qcrypto-hmac-sha1
[ 3500.507221] qcrypto 8e20000.qcrypto: qcrypto-hmac-sha256
[ 3500.512514] qcrypto 8e20000.qcrypto: qcrypto-aes-ccm
[ 3500.517442] qcrypto 8e20000.qcrypto: qcrypto-rfc4309-aes-ccm



测试参考命令:
openssl speed -evp md5 sha1 sha256 sha512 des des-ede3 aes-128-cbc aes-192-cbc aes-256-cbc rsa2048 dsa2048 -elapsed | tee /tmp/sslspeed | awk -v ORS="" '$1 ~ /OpenSSL/ {print "| " $2 " |"} $1 ~ /(md5|sha)/ {print "  " $5 " |"} $1 ~ /(des|aes)/ {b = b "  " $6 " |"} $1 ~ /(rsa|dsa)/ {print b "  " $6 " |  " $7 " |";b=""} END { print "\n" }' | sed 's/\.\(..\)k/\10/g'


注意,这个跟OpenWrt官方的openssl测试命令不一样,可能不具备参考意义.

单核测试:
openssl speed -evp md5 sha1 sha256 sha512 des des-ede3 aes-128-cbc aes-192-cbc aes-256-cbc rsa2048 dsa2048 -elapsed | tee /tmp/sslspeed | awk -v ORS="" '$1 ~ /OpenSSL/ {print "| " $2 " |"} $1 ~ /(md5|sha)/ {print "  " $5 " |"} $1 ~ /(des|aes)/ {b = b "  " $6 " |"} $1 ~ /(rsa|dsa)/ {print b "  " $6 " |  " $7 " |";b=""} END { print "\n" }' | sed 's/\.\(..\)k/\10/g'

OpenSSL 1.0.2l  25 May 2017
built on: reproducible build, date unspecified
options:bn(64,32) rc4(ptr,char) des(idx,cisc,2,long) aes(partial) blowfish(ptr)
compiler: arm-openwrt-linux-uclibcgnueabi-gcc -I. -I.. -I../include  -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -I/home/vic/work/PandoraBox/staging_dir/target-arm_cortex-a7+neon-vfpv4_uClibc-1.0.x_eabi/usr/include -I/home/vic/work/PandoraBox/staging_dir/target-arm_cortex-a7+neon-vfpv4_uClibc-1.0.x_eabi/include -I/home/vic/work/PandoraBox/staging_dir/toolchain-arm_cortex-a7+neon-vfpv4_gcc-4.8-linaro_uClibc-1.0.x_eabi/usr/include -I/home/vic/work/PandoraBox/staging_dir/toolchain-arm_cortex-a7+neon-vfpv4_gcc-4.8-linaro_uClibc-1.0.x_eabi/include -znow -zrelro -DOPENSSL_SMALL_FOOTPRINT -DHAVE_CRYPTODEV -DOPENSSL_NO_ERR -DTERMIOS -Os -pipe -mcpu=cortex-a7 -mfpu=neon-vfpv4 -fno-caller-saves -fhonour-copts -Wno-error=unused-but-set-variable -Wno-error=unused-result -mfloat-abi=soft  -D_FORTIFY_SOURCE=1 -Wl,-z,now -Wl,-z,relro -fpic -I/home/vic/work/PandoraBox/package/libs/openssl/include -ffunction-sections -fdata-sections -fomit-frame-pointer -Wall -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DBSAES_ASM -DGHASH_ASM
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
sha1              3771.87k    11617.62k    26297.09k    38891.93k    45320.87k
des cbc           6398.44k     6593.32k     6670.93k     6663.48k     6687.40k
des ede3          2314.30k     2359.51k     2360.98k     2372.27k     2372.95k
aes-128 cbc      14555.15k    15284.37k    15563.35k    15624.87k    15586.57k
aes-192 cbc      12634.87k    13224.46k    13466.88k    13515.43k    13485.50k
aes-256 cbc      11394.85k    11877.61k    12075.26k    12114.60k    12089.32k
md5               4464.73k    13942.52k    33987.50k    52480.34k    62387.11k
sha256            4593.37k    10461.96k    18638.34k    23179.82k    25067.52k
sha512            2395.69k     9593.32k    14229.25k    19657.74k    22238.55k
                  sign    verify    sign/s verify/s
rsa 2048 bits 0.051015s 0.001476s     19.6    677.7
                  sign    verify    sign/s verify/s
dsa 2048 bits 0.013564s 0.014613s     73.7     68.4

| 1.0.2l |  38891930 |  52480340 |  23179820 |  19657740 |  6663480 |  2372270 |  15624870 |  13515430 |  12114600 |  19.6 |  677.7 |  73.7 |  68.4 |


四核测试:
openssl speed -evp md5 sha1 sha256 sha512 des des-ede3 aes-128-cbc aes-192-cbc aes-256-cbc rsa2048 dsa2048 -elapsed -multi 4 | tee /tmp/sslspeed | awk -v ORS="" '$1 ~ /OpenSSL/ {print "| " $2 " |"} $1 ~ /(md5|sha)/ {print "  " $5 " |"} $1 ~ /(des|aes)/ {b = b "  " $6 " |"} $1 ~ /(rsa|dsa)/ {print b "  " $6 " |  " $7 " |";b=""} END { print "\n" }' | sed 's/\.\(..\)k/\10/g'

OpenSSL 1.0.2l  25 May 2017
built on: reproducible build, date unspecified
options:bn(64,32) rc4(ptr,char) des(idx,cisc,2,long) aes(partial) blowfish(ptr)
compiler: arm-openwrt-linux-uclibcgnueabi-gcc -I. -I.. -I../include  -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -I/home/vic/work/PandoraBox/staging_dir/target-arm_cortex-a7+neon-vfpv4_uClibc-1.0.x_eabi/usr/include -I/home/vic/work/PandoraBox/staging_dir/target-arm_cortex-a7+neon-vfpv4_uClibc-1.0.x_eabi/include -I/home/vic/work/PandoraBox/staging_dir/toolchain-arm_cortex-a7+neon-vfpv4_gcc-4.8-linaro_uClibc-1.0.x_eabi/usr/include -I/home/vic/work/PandoraBox/staging_dir/toolchain-arm_cortex-a7+neon-vfpv4_gcc-4.8-linaro_uClibc-1.0.x_eabi/include -znow -zrelro -DOPENSSL_SMALL_FOOTPRINT -DHAVE_CRYPTODEV -DOPENSSL_NO_ERR -DTERMIOS -Os -pipe -mcpu=cortex-a7 -mfpu=neon-vfpv4 -fno-caller-saves -fhonour-copts -Wno-error=unused-but-set-variable -Wno-error=unused-result -mfloat-abi=soft  -D_FORTIFY_SOURCE=1 -Wl,-z,now -Wl,-z,relro -fpic -I/home/vic/work/PandoraBox/package/libs/openssl/include -ffunction-sections -fdata-sections -fomit-frame-pointer -Wall -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DBSAES_ASM -DGHASH_ASM
sha1             15046.95k    46669.54k   105090.72k   156377.73k   181043.20k
des cbc          25591.08k    26441.75k    26631.40k    26748.87k    26704.29k
des ede3          9289.82k     9433.10k     9463.75k     9502.32k     9484.76k
aes-128 cbc      58315.65k    61215.49k    62252.86k    62453.79k    62518.01k
aes-192 cbc      50547.97k    52962.04k    53851.49k    54016.63k    54082.21k
aes-256 cbc      45557.34k    47589.85k    48288.59k    48409.55k    48457.45k
evp              17847.60k    55841.04k   135899.63k   209737.97k   250202.75k
sha256           18363.72k    41954.86k    74417.58k    93127.37k   100124.75k
sha512            9595.55k    38440.04k    56842.46k    78974.14k    88835.57k
                  sign    verify    sign/s verify/s
rsa 2048 bits 0.012819s 0.000369s     78.0   2707.3
                  sign    verify    sign/s verify/s
dsa 2048 bits 0.003402s 0.003578s    293.9    279.5

| 1.0.2l |  156377730 |  93127370 |  78974140 |  26748870 |  9502320 |  62453790 |  54016630 |  48409550 |  78.0 |  2707.3 |  293.9 |  279.5 |


硬件加密测试:
openssl speed -evp md5 sha1 sha256 sha512 des des-ede3 aes-128-cbc aes-192-cbc aes-256-cbc rsa2048 dsa2048  -engine cryptodev  -elapsed| tee /tmp/sslspeed | awk -v ORS="" '$1 ~ /OpenSSL/ {print "| " $2 " |"} $1 ~ /(md5|sha)/ {print "  " $5 " |"} $1 ~ /(des|aes)/ {b = b "  " $6 " |"} $1 ~ /(rsa|dsa)/ {print b "  " $6 " |  " $7 " |";b=""} END { print "\n" }' | sed 's/\.\(..\)k/\10/g'

OpenSSL 1.0.2l  25 May 2017
built on: reproducible build, date unspecified
options:bn(64,32) rc4(ptr,char) des(idx,cisc,2,long) aes(partial) blowfish(ptr)
compiler: arm-openwrt-linux-uclibcgnueabi-gcc -I. -I.. -I../include  -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -I/home/vic/work/PandoraBox/staging_dir/target-arm_cortex-a7+neon-vfpv4_uClibc-1.0.x_eabi/usr/include -I/home/vic/work/PandoraBox/staging_dir/target-arm_cortex-a7+neon-vfpv4_uClibc-1.0.x_eabi/include -I/home/vic/work/PandoraBox/staging_dir/toolchain-arm_cortex-a7+neon-vfpv4_gcc-4.8-linaro_uClibc-1.0.x_eabi/usr/include -I/home/vic/work/PandoraBox/staging_dir/toolchain-arm_cortex-a7+neon-vfpv4_gcc-4.8-linaro_uClibc-1.0.x_eabi/include -znow -zrelro -DOPENSSL_SMALL_FOOTPRINT -DHAVE_CRYPTODEV -DOPENSSL_NO_ERR -DTERMIOS -Os -pipe -mcpu=cortex-a7 -mfpu=neon-vfpv4 -fno-caller-saves -fhonour-copts -Wno-error=unused-but-set-variable -Wno-error=unused-result -mfloat-abi=soft  -D_FORTIFY_SOURCE=1 -Wl,-z,now -Wl,-z,relro -fpic -I/home/vic/work/PandoraBox/package/libs/openssl/include -ffunction-sections -fdata-sections -fomit-frame-pointer -Wall -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DBSAES_ASM -DGHASH_ASM
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
sha1              3752.91k    11674.82k    26308.01k    38924.25k    45315.41k
des cbc           6376.22k     6615.02k     6670.25k     6660.42k     6690.13k
des ede3          2312.77k     2360.55k     2370.99k     2366.43k     2375.68k
aes-128 cbc      14524.97k    15307.58k    15489.96k    15604.39k    15567.52k
aes-192 cbc      12618.89k    13243.84k    13402.07k    13499.73k    13471.89k
aes-256 cbc      11366.22k    11900.44k    12023.50k    12102.66k    12075.72k
md5               4374.39k    13782.44k    33542.12k    52304.55k    62357.18k
sha256            4577.18k    10497.15k    18635.61k    23183.22k    25067.52k
sha512            2386.94k     9625.98k    14229.33k    19656.04k    22235.82k
                  sign    verify    sign/s verify/s
rsa 2048 bits 0.052021s 0.001480s     19.2    675.6
                  sign    verify    sign/s verify/s
dsa 2048 bits 0.013638s 0.014239s     73.3     70.2
| 1.0.2l |  38924250 |  52304550 |  23183220 |  19656040 |  6660420 |  2366430 |  15604390 |  13499730 |  12102660 |  19.2 |  675.6 |  73.3 |  70.2 |

四核硬件加密测试:
openssl speed -evp md5 sha1 sha256 sha512 des des-ede3 aes-128-cbc aes-192-cbc aes-256-cbc rsa2048 dsa2048  -engine cryptodev  -elapsed -multi 4| tee /tmp/sslspeed | awk -v ORS="" '$1 ~ /OpenSSL/ {print "| " $2 " |"} $1 ~ /(md5|sha)/ {print "  " $5 " |"} $1 ~ /(des|aes)/ {b = b "  " $6 " |"} $1 ~ /(rsa|dsa)/ {print b "  " $6 " |  " $7 " |";b=""} END { print "\n" }' | sed 's/\.\(..\)k/\10/g'


OpenSSL 1.0.2l  25 May 2017
built on: reproducible build, date unspecified
options:bn(64,32) rc4(ptr,char) des(idx,cisc,2,long) aes(partial) blowfish(ptr)
compiler: arm-openwrt-linux-uclibcgnueabi-gcc -I. -I.. -I../include  -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -I/home/vic/work/PandoraBox/staging_dir/target-arm_cortex-a7+neon-vfpv4_uClibc-1.0.x_eabi/usr/include -I/home/vic/work/PandoraBox/staging_dir/target-arm_cortex-a7+neon-vfpv4_uClibc-1.0.x_eabi/include -I/home/vic/work/PandoraBox/staging_dir/toolchain-arm_cortex-a7+neon-vfpv4_gcc-4.8-linaro_uClibc-1.0.x_eabi/usr/include -I/home/vic/work/PandoraBox/staging_dir/toolchain-arm_cortex-a7+neon-vfpv4_gcc-4.8-linaro_uClibc-1.0.x_eabi/include -znow -zrelro -DOPENSSL_SMALL_FOOTPRINT -DHAVE_CRYPTODEV -DOPENSSL_NO_ERR -DTERMIOS -Os -pipe -mcpu=cortex-a7 -mfpu=neon-vfpv4 -fno-caller-saves -fhonour-copts -Wno-error=unused-but-set-variable -Wno-error=unused-result -mfloat-abi=soft  -D_FORTIFY_SOURCE=1 -Wl,-z,now -Wl,-z,relro -fpic -I/home/vic/work/PandoraBox/package/libs/openssl/include -ffunction-sections -fdata-sections -fomit-frame-pointer -Wall -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DBSAES_ASM -DGHASH_ASM
sha1             15024.30k    46665.59k   105066.14k   156106.04k   181622.10k
des cbc          25581.13k    26387.41k    26675.97k    26750.68k    26742.39k
des ede3          9282.83k     9421.83k     9486.94k     9488.57k     9501.09k
aes-128 cbc      58180.48k    61344.74k    62222.73k    62398.34k    62564.61k
aes-192 cbc      50450.06k    53099.30k    53767.74k    54081.28k    54093.12k
aes-256 cbc      45561.67k    47586.17k    48263.11k    48540.33k    48430.78k
evp              17836.66k    55824.71k   135816.24k   209943.60k   249973.03k
sha256           18334.93k    41949.15k    74438.85k    92960.90k   100453.03k
sha512            9569.52k    38462.90k    56806.66k    78947.31k    88936.27k
                  sign    verify    sign/s verify/s
rsa 2048 bits 0.012832s 0.000371s     77.9   2695.9
                  sign    verify    sign/s verify/s
dsa 2048 bits 0.003418s 0.003580s    292.6    279.3

| 1.0.2l |  156106040 |  92960900 |  78947310 |  26750680 |  9488570 |  62398340 |  54081280 |  48540330 |  77.9 |  2695.9 |  292.6 |  279.3 |



单独硬件AES测试:
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-128-cbc(软加密)       1397.85k     4002.41k     7981.16k    10677.93k    11698.18k
aes-128-cbc(硬件加密)        308.76k     1227.65k     4593.71k    16221.18k    68007.21k




总结,其实启用HWCRYPTO跟不启用HWCRYPTO的加密性能差距不大,在小块的情况下,硬件加密的速度反而会比CPU加密慢.
越趋向大块的时候,硬件加密跟软件加密的差距才被拉大,在8K的AES-128-CBC上,硬件加密能领先6倍,这个对部分virtual**应用非常有用.

另外,看起来硬件加密模块也并未完全用上,这貌似是我的坑?
IPQ40XX的单核性能惨不忍睹,多核性能才看起来像个样子.

无线***

低主频的悲哀
[K3 ~]# openssl speed -evp  aes-128-cbc
WARNING: can't open config file: /usr/openssl.cnf
Doing aes-128-cbc for 3s on 16 size blocks: 4791297 aes-128-cbc's in 2.98s
Doing aes-128-cbc for 3s on 64 size blocks: 1308958 aes-128-cbc's in 2.99s
Doing aes-128-cbc for 3s on 256 size blocks: 338008 aes-128-cbc's in 2.99s
Doing aes-128-cbc for 3s on 1024 size blocks: 85195 aes-128-cbc's in 2.98s
Doing aes-128-cbc for 3s on 8192 size blocks: 10673 aes-128-cbc's in 2.99s
OpenSSL 1.0.1j 15 Oct 2014
built on: Thu Nov  2 15:08:17 CST 2017
options:bn(64,32) rc4(ptr,char) des(idx,cisc,16,long) aes(partial) idea(int) blowfish(ptr)
compiler: arm-brcm-linux-uclibcgnueabi-gcc -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTERMIO -O3 -Wall
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-128-cbc      25725.08k    28017.83k    28939.82k    29275.06k    29241.88k
[K3 ~]# openssl speed -evp  aes-128-cbc  -multi 2
WARNING: can't open config file: /usr/openssl.cnf
Forked child 0
Forked child 1
+DT:aes-128-cbc:3:16
+DT:aes-128-cbc:3:16
+R:4704894:aes-128-cbc:3.000000
+DT:aes-128-cbc:3:64
+R:4678965:aes-128-cbc:3.000000
+DT:aes-128-cbc:3:64
+R:1270291:aes-128-cbc:3.000000
+DT:aes-128-cbc:3:256
+R:1288856:aes-128-cbc:3.000000
+DT:aes-128-cbc:3:256
+R:332707:aes-128-cbc:3.000000
+DT:aes-128-cbc:3:1024
+R:338502:aes-128-cbc:3.000000
+DT:aes-128-cbc:3:1024
+R:83394:aes-128-cbc:3.000000
+DT:aes-128-cbc:3:8192
+R:85125:aes-128-cbc:3.000000
+DT:aes-128-cbc:3:8192
+R:10475:aes-128-cbc:3.000000
+R:10694:aes-128-cbc:3.000000
Got: +H:16:64:256:1024:8192 from 0
Got: +F:22:aes-128-cbc:25092768.00:27495594.67:28885504.00:29056000.00:29201749.33 from 0
Got: +H:16:64:256:1024:8192 from 1
Got: +F:22:aes-128-cbc:24954480.00:27099541.33:28390997.33:28465152.00:28603733.33 from 1
OpenSSL 1.0.1j 15 Oct 2014
built on: Thu Nov  2 15:08:17 CST 2017
options:bn(64,32) rc4(ptr,char) des(idx,cisc,16,long) aes(partial) idea(int) blowfish(ptr)
compiler: arm-brcm-linux-uclibcgnueabi-gcc -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTERMIO -O3 -Wall
evp              50047.25k    54595.14k    57276.50k    57521.15k    57805.48k

li***

lintel居然发帖了

li***

能在你得固件里面集成wificoin的挖矿插件吗啊？

lin***

无线无极限 发表于 2018-4-12 17:59
低主频的悲哀
[K3 ~]# openssl speed -evp  aes-128-cbc
WARNING: can't open config file: /usr/opens ...

四线程加密:

evp                495.39k     1969.61k     7798.66k    26535.89k    86029.61k

add***

真的确认开全了么？
单线程：
root@OpenWrt:~# openssl speed -evp  aes-128-cbc
Doing aes-128-cbc for 3s on 16 size blocks: 54993 aes-128-cbc's in 0.09s
Doing aes-128-cbc for 3s on 64 size blocks: 55842 aes-128-cbc's in 0.12s
Doing aes-128-cbc for 3s on 256 size blocks: 55477 aes-128-cbc's in 0.12s
Doing aes-128-cbc for 3s on 1024 size blocks: 42392 aes-128-cbc's in 0.09s
Doing aes-128-cbc for 3s on 8192 size blocks: 25961 aes-128-cbc's in 0.07s
OpenSSL 1.0.2q  20 Nov 2018
built on: reproducible build, date unspecified
options:bn(64,32) rc4(ptr,char) des(idx,cisc,16,long) aes(partial) idea(int) blowfish(ptr)
compiler: arm-openwrt-linux-muslgnueabi-gcc -fPIC -DOPENSSL_PIC -DZLIB_SHARED -DZLIB -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -znow -zrelro -DHAVE_CRYPTODEV -DUSE_CRYPTODEV_DIGESTS -DOPENSSL_NO_ERR -DTERMIOS -pipe -fno-caller-saves -fno-plt -fhonour-copts -Wno-error=unused-but-set-variable -Wno-error=unused-result -mfloat-abi=hard -Wformat -Werror=format-security -fstack-protector -D_FORTIFY_SOURCE=1 -Wl,-z,now -Wl,-z,relro -O3 -fpic -ffunction-sections -fdata-sections -fomit-frame-pointer -Wall -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DBSAES_ASM -DGHASH_ASM
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-128-cbc       9776.53k    29782.40k   118350.93k   482326.76k  3038178.74k
root@OpenWrt:~#
4线程：
root@OpenWrt:~# openssl speed -evp  aes-128-cbc  -multi 4
Forked child 0
Forked child 1
Forked child 2
Forked child 3
+DT:aes-128-cbc:3:16
+DT:aes-128-cbc:3:16
+DT:aes-128-cbc:3:16
+DT:aes-128-cbc:3:16
+R:154434:aes-128-cbc:3.010000
+DT:aes-128-cbc:3:64
+R:140680:aes-128-cbc:3.010000
+DT:aes-128-cbc:3:64
+R:142662:aes-128-cbc:3.010000
+DT:aes-128-cbc:3:64
+R:146600:aes-128-cbc:3.010000
+DT:aes-128-cbc:3:64
+R:128861:aes-128-cbc:3.000000
+DT:aes-128-cbc:3:256
+R:136381:aes-128-cbc:3.000000
+DT:aes-128-cbc:3:256
+R:129159:aes-128-cbc:3.000000
+DT:aes-128-cbc:3:256
+R:136334:aes-128-cbc:3.000000
+DT:aes-128-cbc:3:256
+R:106273:aes-128-cbc:3.000000
+DT:aes-128-cbc:3:1024
+R:104780:aes-128-cbc:3.000000
+DT:aes-128-cbc:3:1024
+R:105872:aes-128-cbc:3.010000
+R:102831:aes-128-cbc:3.010000
+DT:aes-128-cbc:3:1024
+DT:aes-128-cbc:3:1024
+R:52042:aes-128-cbc:3.000000
+DT:aes-128-cbc:3:8192
+R:54992:aes-128-cbc:3.010000
+DT:aes-128-cbc:3:8192
+R:52247:aes-128-cbc:3.010000
+DT:aes-128-cbc:3:8192
+R:54902:aes-128-cbc:3.020000
+DT:aes-128-cbc:3:8192
+R:10027:aes-128-cbc:3.010000
+R:9806:aes-128-cbc:3.010000
+R:10134:aes-128-cbc:3.000000
Got: +H:16:64:256:1024:8192 from 0
Got: +F:22:aes-128-cbc:820911.63:2909461.33:8941226.67:18708241.86:26687957.48 from 0
+R:9840:aes-128-cbc:3.000000
Got: +H:16:64:256:1024:8192 from 1
Got: +F:22:aes-128-cbc:779269.10:2908458.67:9004396.01:18615777.48:26869760.00 from 1
Got: +H:16:64:256:1024:8192 from 2
Got: +F:22:aes-128-cbc:758336.21:2755392.00:8745759.47:17774394.68:27672576.00 from 2
Got: +H:16:64:256:1024:8192 from 3
Got: +F:22:aes-128-cbc:747800.66:2749034.67:9068629.33:17763669.33:27289429.90 from 3
OpenSSL 1.0.2q  20 Nov 2018
built on: reproducible build, date unspecified
options:bn(64,32) rc4(ptr,char) des(idx,cisc,16,long) aes(partial) idea(int) blowfish(ptr)
compiler: arm-openwrt-linux-muslgnueabi-gcc -fPIC -DOPENSSL_PIC -DZLIB_SHARED -DZLIB -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -znow -zrelro -DHAVE_CRYPTODEV -DUSE_CRYPTODEV_DIGESTS -DTERMIOS -pipe -fno-caller-saves -fno-plt -fhonour-copts -Wno-error=unused-but-set-variable -Wno-error=unused-result -mfloat-abi=hard -Wformat -Werror=format-security -fstack-protector -D_FORTIFY_SOURCE=1 -Wl,-z,now -Wl,-z,relro -O3 -fpic -ffunction-sections -fdata-sections -fomit-frame-pointer -Wall -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DBSAES_ASM -DGHASH_ASM
evp               3106.32k    11322.35k    35760.01k    72862.08k   108519.72k
root@OpenWrt:~#

hua***

addfix 发表于 2020-2-5 15:40
真的确认开全了么？
单线程：
root@OpenWrt:~# openssl speed -evp  aes-128-cbc

你的单核为什么这么高？是IPQ4019吗？有固件源码吗？

add***

LEDE-NSS-IPQ8064,有机会在移植4019,现在努力在移植QCA-WIFI