Check openssl for AES-NI

From snippet wiki
Jump to navigation Jump to search

How to check if hardware support for encryption is enabled and working?

Run those two commands:

openssl speed -elapsed -evp aes-128-cbc
OPENSSL_ia32cap="~0x200000200000000" openssl speed -elapsed -evp aes-128-cbc

The first results are much faster if AES-NI is working. Otherwise they should be similar.

type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-128-cbc     689695.63k   750060.22k   763891.46k   767538.86k   769867.78k
...
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-128-cbc     339710.29k   383804.20k   391141.38k   397022.55k   391342.76k