Re: AES assembler optimizations

Bob Deblier
2004-08-09T16:09:01Z

On Mon, 2004-08-09 at 16:28, Andi Kleen wrote:
> Bob Deblier <bob.deblier@telenet.be> writes:
>
> > Just picked up on KernelTrap that there were some problems with
> > optimized AES code; if you wish, I can provide my own LGPL licensed (or
> > I can relicense them for you under GPL), as included in the BeeCrypt
> > Cryptography Library.
> >
> > I have generic i586 code and SSE-optimized code available in GNU
> > assembler format. Latest version is always available on SourceForge
> > (http://sourceforge.net/cvs/?group_id=8924).
>
> Would be interesting. Do you have any benchmarks for your code?

BeeCrypt contains benchmarks in the 'tests' subdirectory. Running of
'make bench' will execute them. Benchmarks results below for repeatedly
looping over the same 16K block, produced by 'benchbc', without any
tweaks (YMMV):

P4 2400, with MMX:
ECB encrypted 738304 KB in 10.00 seconds = 73823.02 KB/s
CBC encrypted 659456 KB in 10.00 seconds = 65925.82 KB/s
ECB decrypted 765952 KB in 10.00 seconds = 76564.57 KB/s
CBC decrypted 616448 KB in 10.02 seconds = 61546.33 KB/s

P4 2400, plain i386:
ECB encrypted 584704 KB in 10.01 seconds = 58435.34 KB/s
CBC encrypted 570368 KB in 10.01 seconds = 56979.82 KB/s
ECB decrypted 444416 KB in 10.02 seconds = 44357.32 KB/s
CBC decrypted 423936 KB in 10.02 seconds = 42304.76 KB/s

P3 800, with MMX:
ECB encrypted 436224 KB in 10.02 seconds = 43526.64 KB/s
CBC encrypted 308224 KB in 10.02 seconds = 30776.24 KB/s
ECB decrypted 449536 KB in 10.00 seconds = 44935.63 KB/s
CBC decrypted 292864 KB in 10.01 seconds = 29262.99 KB/s

P3 800, plain i386:
ECB encrypted 177152 KB in 10.03 seconds = 17665.74 KB/s
CBC encrypted 160768 KB in 10.03 seconds = 16030.31 KB/s
ECB decrypted 163840 KB in 10.05 seconds = 16300.87 KB/s
CBC decrypted 153600 KB in 10.04 seconds = 15306.43 KB/s

> However I think we would need to get rid of the M4 first. I don't
> think it would be a good idea to add that as kernel build dependency.
> Linux kernel assembly normally uses the C preprocessor and modern gas
> also has a quite powerful macro facility that is usually good
> enough. Any chance to convert the code to one of these?

I switched to M4 just to make sure the code works on more platforms than
just Linux with modern tools. It's quite easy to convert - it probably
wouldn't take more than an hour or so to produce a version for one fixed
platform.

Sincerely,

Bob Deblier