From: Ben Greear <greearb@candelatech.com>
To: Christian Lamparter <chunkeey@googlemail.com>
Cc: Jouni Malinen <j@w1.fi>,
"linux-wireless@vger.kernel.org" <linux-wireless@vger.kernel.org>,
Johannes Berg <johannes@sipsolutions.net>
Subject: Re: Looking for non-NIC hardware-offload for wpa2 decrypt.
Date: Tue, 12 Aug 2014 11:34:59 -0700 [thread overview]
Message-ID: <53EA5E53.9010704@candelatech.com> (raw)
In-Reply-To: <1518134.xFh23iA8q1@blech>
On 08/10/2014 06:44 AM, Christian Lamparter wrote:
> On Thursday, August 07, 2014 10:45:01 AM Ben Greear wrote:
>> On 08/07/2014 07:05 AM, Christian Lamparter wrote:
>>> Or: for every 16 Bytes of payload there is one fpu context save and
>>> restore... ouch!
>>
>> Any idea if it would work to put the fpu_begin/end a bit higher
>> and do all those 16 byte chunks in a batch without messing with
>> the FPU for each chunk?
>
> It sort of works - see sample feature patch for aesni-intel-glue
> (taken from 3.16-wl). Older kernels (like 3.15, 3.14) need:
> "crypto: allow blkcipher walks over AEAD data" [0] (and maybe more).
>
> The FPU save/restore overhead should be gone. Also, if the aesni
> instructions can't be used, the implementation will fall back
> to the original ccm(aes) code. Calculating the MAC is still much
> more expensive than the payload encryption or decryption. However,
> I can't see a way of making this more efficient without rewriting
> and combining the parts I took from crypto/ccm.c into an several,
> dedicated assembler functions.
I tried this patch on my i7 machine, on the 3.16+ kernel. Without your
patch, I see about 260Mbps download. With it, performance improves
to around 350Mbps - 375Mbps.
Without encryption, I see download rate of around 400 - 420Mbps.
So, your patch looks like a good improvement to me, and I'll be
happy to test further patches if you happen to do those assembler
optimizations you talk about above.
Let me know if you would like more/different performance
stats.
Here is perf top of open authentication, download, UDP:
Samples: 64K of event 'cycles', Event count (approx.): 8792558478
30.78% btserver [.] 0x0000000000100501
2.73% [kernel] [k] copy_user_generic_string
2.02% [kernel] [k] swiotlb_tbl_unmap_single
1.43% [kernel] [k] ioread32
1.40% [ath10k_core] [k] ath10k_htt_txrx_compl_task
1.38% [kernel] [k] csum_partial
1.22% [kernel] [k] _raw_spin_lock_irqsave
0.97% [cfg80211] [k] ftrace_define_fields_rdev_return_int_survey_info
0.97% [kernel] [k] pskb_expand_head
0.95% [kernel] [k] do_raw_spin_lock
0.82% [kernel] [k] __slab_free
0.78% [kernel] [k] __sk_run_filter
0.71% [kernel] [k] __rcu_read_unlock
0.67% [kernel] [k] __netif_receive_skb_core
0.65% [kernel] [k] __rcu_read_lock
0.62% [kernel] [k] build_skb
0.59% [mac80211] [k] ieee80211_rx_handlers
0.55% [kernel] [k] nf_iterate
0.52% [kernel] [k] arch_local_irq_restore
Using WPA2, sw-crypt, download, UDP:
Samples: 52K of event 'cycles', Event count (approx.): 13162827574
24.78% btserver [.] 0x00000000000c598c
10.97% [kernel] [k] _aesni_enc1
2.75% [kernel] [k] _aesni_enc4
2.26% [kernel] [k] crypto_xor
1.69% [kernel] [k] aesni_enc
1.29% [kernel] [k] swiotlb_tbl_unmap_single
1.21% [kernel] [k] copy_user_generic_string
1.17% [kernel] [k] ioread32
1.13% [kernel] [k] get_data_to_compute
0.99% [kernel] [k] _raw_spin_lock_irqsave
0.91% [ath10k_core] [k] ath10k_htt_txrx_compl_task
0.70% [kernel] [k] __schedule
0.70% [kernel] [k] native_write_msr_safe
0.69% [kernel] [k] csum_partial
0.62% [kernel] [k] pskb_expand_head
0.62% [kernel] [k] __switch_to
0.58% [kernel] [k] do_raw_spin_lock
0.53% [kernel] [k] menu_select
0.51% [kernel] [k] __rcu_read_unlock
0.47% [cfg80211] [k] ftrace_define_fields_rdev_return_int_survey_info
0.47% [kernel] [k] _aesni_inc
0.47% [kernel] [k] __rcu_read_lock
0.47% [kernel] [k] __sk_run_filter
0.44% [kernel] [k] aesni_ctr_enc
0.43% [kernel] [k] arch_local_irq_restore
0.43% [kernel] [k] do_sys_poll
0.42% [kernel] [k] __netif_receive_skb_core
0.41% [mac80211] [k] ieee80211_rx_handlers
0.38% [kernel] [k] update_cfs_shares
Thanks,
Ben
--
Ben Greear <greearb@candelatech.com>
Candela Technologies Inc http://www.candelatech.com
next prev parent reply other threads:[~2014-08-12 18:35 UTC|newest]
Thread overview: 21+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-03-31 4:40 Looking for non-NIC hardware-offload for wpa2 decrypt Ben Greear
2014-03-31 18:09 ` Christian Lamparter
2014-07-28 20:50 ` Ben Greear
2014-07-29 22:29 ` Christian Lamparter
2014-07-29 22:50 ` Ben Greear
2014-07-30 18:59 ` Christian Lamparter
2014-07-30 19:08 ` Ben Greear
2014-07-31 20:05 ` Jouni Malinen
2014-07-31 20:45 ` Christian Lamparter
2014-08-05 23:09 ` Ben Greear
2014-08-07 14:05 ` Christian Lamparter
2014-08-07 17:45 ` Ben Greear
2014-08-10 13:44 ` Christian Lamparter
2014-08-12 18:34 ` Ben Greear [this message]
2014-08-14 12:39 ` Christian Lamparter
2014-08-14 17:09 ` Ben Greear
2014-08-19 18:18 ` Ben Greear
2014-08-20 20:47 ` Christian Lamparter
2014-08-20 21:04 ` Ben Greear
2014-08-22 22:55 ` Christian Lamparter
2014-07-30 7:06 ` Johannes Berg
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=53EA5E53.9010704@candelatech.com \
--to=greearb@candelatech.com \
--cc=chunkeey@googlemail.com \
--cc=j@w1.fi \
--cc=johannes@sipsolutions.net \
--cc=linux-wireless@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).