VIA Esther processor 1500MHz (w. PadLock)

Shortcuts: openSSH openSSL encrypted disk

cpus: 1

CPU :	family , model 10 and stepping 9
model name :	VIA Esther processor 1500MHz
cpu MHz :	1500.000
cache size :	128 KB
flags :	fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge cmov pat clflush acpi mmx fxsr sse sse2 tm pni est tm2 rng rng_en ace ace_en ace2 ace2_en phe phe_en pmm pmm_en
bogomips :	3000.01

Mainboard :	VIA NAS-7800
Memory :	1G  DDR2 @ (ADATA)
Memory benchmark (hdparm) :	241.83 MB/sec
HD benchmark (hdparm udma4) : (LEXAR ATA FLASH CARD)	41.65 MB/sec

OS:OpenSuSe 12.3 i586
openssl version

OpenSSL 1.0.1e 11 Feb 2013

linux:~> openssl engine

(dynamic) Dynamic engine loading support

Padlock is not explicitly mentioned here  but is supported and active via /etc/ssl/openssl.cnf :

linux:~> openssl engine -engine padlock
3074152072:error:25066067:DSO support routines:DLFCN_LOAD:could not load the shared library:dso_dlfcn.c:187:filename(/lib/engines/lib-engine.so): /lib/engines/lib-engine.so: cannot open shared object file: No such file or directory
3074152072:error:25070067:DSO support routines:DSO_load:could not load the shared library:dso_lib.c:244:
3074152072:error:260B6084:engine routines:DYNAMIC_LOAD:dso not found:eng_dyn.c:450:
3074152072:error:2606A074:engine routines:ENGINE_by_id:no such engine:eng_list.c:417:id=-engine
(padlock) VIA PadLock (no-RNG, ACE)

(no guess about the error messages)

OpenSSL benchmark

Padlock enabled:
linux:~> openssl speed -evp aes-128-cbc rc4 blowfish
The 'numbers' are in 1000s of bytes per second processed.

type	16 bytes	64 bytes	256 bytes	1024 bytes	8192 bytes
rc4	56056.98k	67281.60k	70631.85k	71735.64k	72056.83k
blowfish cbc	28871.10k	30710.25k	31215.10k	31367.17k	31413.59k
aes-128-cbc	56118.19k	135257.88k	216046.34k	275569.66k	323131.93k

Padlock disabled:

type	16 bytes	64 bytes	256 bytes	1024 bytes	8192 bytes
rc4	56242.78k	67245.53k	70622.72k	71963.57k	72034.99k
blowfish cbc	28771.66k	30706.86k	31304.52k	31358.98k	31410.86k
aes-128-cbc	10733.81k	11662.96k	11959.81k	23062.53k	23255.42k

openSSH benchmark

Create big empty file (100Mb file)

linux:~> dd if=/dev/zero of=bigfile count=0 seek=200k  

ssh benchmark - to localhost. (ssh and sshd share the same CPU)

linux:~> scp bigfile localhost:/dev/null 
for i in aes128-cbc blowfish ; do scp -c  bigfile localhost:/dev/null ; done

padlock :	enabled	disabled
default :	3.7MB/s	3.7MB/s
aes128-cbc :	14.3MB/s	6.3MB/s
blowfish :	7.7MB/s	7.1MB/s

ssh benchmark outside (padlock enabled)

 
linux:~> for i in aes128-cbc blowfish ; do scp -c  bigfile remote:/dev/null ; done

default :	7.1MB/s
aes128-cbc :	20.0MB/s
blowfish :	12.5MB/s

encrypted ramdisk benchmark:

It seems, that encryption (with padlock) does not slow down the ramdisk as much as one could expect.

padlock enabled   vs.   padlock disabled

blocksize

write speed

read speed

encrypt speed PL

decrypt speed PL

encrypt speed CPU

decrypt speed CPU

512	51.351	91.295	48.216	41.622	5.159	12.581
1k	62.770	109.608	48.847	50.758	6.032	14.310
2k	71.662	121.159	56.640	56.312	6.393	15.180
4k	69.226	126.673	62.128	59.833	6.687	15.568
8k	79.637	130.204	63.657	61.153	6.760	15.802
16k	71.556	130.332	64.779	61.830	6.777	15.872
1M	64.415	117.353	53.490	58.584	6.170	14.937

size: 100 megabytes, cipher: aes-cbc-essiv:sha256, key: 256b



encrypted ramdisk test, direct i/o:
size: 512 megabytes, cipher: aes-cbc-essiv:sha256, key: 256b

blocksize	write speed	read speed	enc speed	dec speed
512	23.780	20.429	12.834	12.806
1k	44.378	38.421	22.742	23.117
2k	81.590	70.329	37.771	38.708
4k	142.958	120.355	55.782	58.294
8k	207.034	166.536	71.251	74.646
16k	266.791	208.799	80.524	86.960
1M	160.870	199.897	59.335	79.223

Links:
Interesting reading (VIA vs Intel vs AMD hardware aes)