Linux

Some numbers on hardware-accelerated crypto

I had a chance to get hands on a few CPUs that have hardware accelarators for cryptographic operations such as AES encryption and SHA hashing. Since I could not find this information for all of them on the Web, here's a list, to be updated when more is available. Some use the Padlock engine, some Intel AES-NI. Data was obtained with the cryptsetup benchmark command.

The Via Nano U2250 (1.6GHz)

Like the Via C7 processor, it features the Padlock engine for acceleration of 128-bit or 256-bit encryption operations, not 512 and not in other modes than cbc.

PBKDF2-sha1       289982 iterations per second
PBKDF2-sha256     195047 iterations per second
PBKDF2-sha512     116198 iterations per second
PBKDF2-ripemd160  193893 iterations per second
PBKDF2-whirlpool   55727 iterations per second
#  Algorithm | Key |  Encryption |  Decryption
     aes-cbc   128b   396.6 MiB/s   444.5 MiB/s
 serpent-cbc   128b    22.2 MiB/s    47.0 MiB/s
 twofish-cbc   128b    53.1 MiB/s    56.2 MiB/s
     aes-cbc   256b   380.9 MiB/s   379.1 MiB/s
 serpent-cbc   256b    26.8 MiB/s    47.0 MiB/s
 twofish-cbc   256b    56.4 MiB/s    56.2 MiB/s
     aes-xts   256b    92.6 MiB/s    92.4 MiB/s
 serpent-xts   256b    43.3 MiB/s    43.5 MiB/s
 twofish-xts   256b    50.9 MiB/s    51.0 MiB/s
     aes-xts   512b    67.5 MiB/s    67.5 MiB/s
 serpent-xts   512b    43.6 MiB/s    43.5 MiB/s
 twofish-xts   512b    51.1 MiB/s    51.0 MiB/s

The Intel Atom C2350 (1.7GHz)

Also called Avoton, this family of Atom processors is not as bad as its predecessors, but still terrible. It is clearly outperformed by the Via Nano on all accelerated operations. AES-NI supports 512-bit keys operations and xts mode, which gives it a big advantage over the Padlock. Non-accelerated operation are only 20 to 50 percent faster than the Nano above, which tells you how bad this processor is.

PBKDF2-sha1       134295 iterations per second
PBKDF2-sha256      80709 iterations per second
PBKDF2-sha512      55727 iterations per second
PBKDF2-ripemd160  120470 iterations per second
PBKDF2-whirlpool   43574 iterations per second
#  Algorithm | Key |  Encryption |  Decryption
     aes-cbc   128b   241.0 MiB/s   332.0 MiB/s
 serpent-cbc   128b    30.8 MiB/s    74.7 MiB/s
 twofish-cbc   128b    67.7 MiB/s    68.5 MiB/s
     aes-cbc   256b   182.0 MiB/s   260.0 MiB/s
 serpent-cbc   256b    30.9 MiB/s    75.0 MiB/s
 twofish-cbc   256b    67.7 MiB/s    68.2 MiB/s
     aes-xts   256b   292.0 MiB/s   292.0 MiB/s
 serpent-xts   256b    69.4 MiB/s    69.0 MiB/s
 twofish-xts   256b    63.0 MiB/s    63.0 MiB/s
     aes-xts   512b   233.0 MiB/s   234.0 MiB/s
 serpent-xts   512b    69.7 MiB/s    69.4 MiB/s
 twofish-xts   512b    63.2 MiB/s    63.2 MiB/s

1 comment

vinvin wrote, on Tue, 03 Jan 2017 21:52:57 +0100

Via C7 is coming soon.

Discuss this article, add a comment:

name: 
website: 
comment: 
If you are human, type 12: