Re: Is OpenSSL AES-NI not available in pgcrypto? - Mailing list pgsql-hackers

From Peter Eisentraut
Subject Re: Is OpenSSL AES-NI not available in pgcrypto?
Date
Msg-id 83bd3e5c-1d7e-0b34-9e93-9fa8ecd0a77e@enterprisedb.com
Whole thread Raw
In response to Is OpenSSL AES-NI not available in pgcrypto?  ("agharta82@gmail.com" <agharta82@gmail.com>)
Responses Re: Is OpenSSL AES-NI not available in pgcrypto?
List pgsql-hackers
On 02.01.23 17:57, agharta82@gmail.com wrote:
> select pgp_sym_encrypt(data::text, 'pwd') --default to aes128
> from generate_series('2022-01-01'::timestamp, '2022-12-31'::timestamp, 
> '1 hour'::interval) data
> 
> vs
> 
> select pgp_sym_encrypt(data::text, 'pwd','cipher-algo=bf') -- blowfish
> from generate_series('2022-01-01'::timestamp, '2022-12-31'::timestamp, 
> '1 hour'::interval) data
> 
> In my test both queries execution is similar....aes-128 was expected 
> about  5 time faster.
> 
> So, why?
> 
> Pgcrypto use OpenSSL as backend, so, does it explicit force software aes 
> calculation instead of AES-NI cpu ones?

I suspect it is actually using AES hardware support, but all the other 
overhead of pgcrypto makes the difference not noticeable.




pgsql-hackers by date:

Previous
From: Tom Lane
Date:
Subject: Re: perl 5.36, C99, -Wdeclaration-after-statement -Wshadow=compatible-local
Next
From: Tom Lane
Date:
Subject: Re: perl 5.36, C99, -Wdeclaration-after-statement -Wshadow=compatible-local