UNPKG

arch-wiki-md-repo

Version:

All arch-wiki articles in markdown format, updated every two days.

github.com/greg-js/arch-wiki-md-repo

greg-js/arch-wiki-md-repo

62 lines (41 loc) • 1.5 kB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
``` # modprobe via_velocity speed_duplex=2 ``` Note: If you issue the command: openssl engine padlock You will probably get this in return: (padlock) VIA PadLock (no-RNG, ACE) From what I have read this deals with VIA's RNG being a bit buggy or insecure or something. Getting padlock to work: (please feel free to help with the formatting of the page. I dont wiki often) Add to /etc/modprobe.d/modprobe.conf: ``` $ alias aes padlock ``` Benchmarks without padlock (3 runs): ``` $ openssl speed -evp aes-128-cbc ``` Output: ``` $ OpenSSL 1.0.0e 6 Sep 2011 built on: Tue Sep 6 17:15:38 UTC 2011 type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-128-cbc 10936.73k 11720.66k 11994.71k 23021.57k 23194.28k aes-128-cbc 10792.41k 11681.17k 11985.58k 23021.91k 23197.01k aes-128-cbc 10791.26k 11642.79k 11980.71k 23022.59k 23197.01k ``` Add to /etc/ssl/openssl.cnf (before [new_oids] section): ``` openssl_conf = openssl_def [openssl_def] engines = openssl_engines [openssl_engines] padlock = padlock_engine [padlock_engine] default_algorithms = ALL ``` after padlock (3 runs): ``` $ type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-128-cbc 58133.80k 143263.17k 234075.05k 297064.11k 342171.65k aes-128-cbc 58162.57k 142958.08k 234077.53k 296989.70k 341712.90k aes-128-cbc 58151.15k 143278.68k 234072.58k 297020.42k 342166.19k ```