hak5
/
openwrt
mirror of https://github.com/hak5/openwrt.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

x86/64: enable AES-NI support in kernel 

The kernel will detect if the host supports this, so we can just enable
it in the kernel config.

Tested on an APU2 with AES-NI support and a KVM VM on a Xeon E5520 host
without AES-NI support.

Throughput over an IPsec tunnel between these 2 hosts increased from
~63Mbps to ~140Mbps. Ciphers: AES_GCM_16_256/PRF_HMAC_SHA2_512/ECP_521.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
lede-17.01
Stijn Tintel 2017-01-04 00:15:23 +01:00
parent 2406b3488f
commit 301301da2b
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
target/linux/x86/64/config-default
View File

@ -52,7 +52,8 @@ CONFIG_CALGARY_IOMMU_ENABLED_BY_DEFAULT=y
CONFIG_CONNECTOR=y CONFIG_CONNECTOR=y
CONFIG_CPU_RMAP=y CONFIG_CPU_RMAP=y
CONFIG_CRC_T10DIF=y CONFIG_CRC_T10DIF=y
# CONFIG_CRYPTO_AES_X86_64 is not set CONFIG_CRYPTO_AES_X86_64=y
CONFIG_CRYPTO_AES_NI_INTEL=y
# CONFIG_CRYPTO_BLOWFISH_X86_64 is not set # CONFIG_CRYPTO_BLOWFISH_X86_64 is not set
# CONFIG_CRYPTO_CAMELLIA_AESNI_AVX2_X86_64 is not set # CONFIG_CRYPTO_CAMELLIA_AESNI_AVX2_X86_64 is not set
# CONFIG_CRYPTO_CAMELLIA_AESNI_AVX_X86_64 is not set # CONFIG_CRYPTO_CAMELLIA_AESNI_AVX_X86_64 is not set