Does the openssl/libressl already use hardware crypto engine?

Sorry, not yet. I guess I have either to backport it to 5.15.x LTS, or to boot a new 6.x kernel? I have another board idling so I’ll try that tomorrow.

2 Likes

Update: On the search for faster rsync and scp / sftp, I found that the rebuilt openssl without hardware crypto acceleration, but with CFLAGS optimized for jh7110 CPU is already faster than the Arch Linux generic package. The real evil is the ssh compression, the benchmark results from multiple tests clearly indicate that the compression option must be disabled. This changes everything I have believed for many years! Finally, the fastest cipher is chacha20-poly1305@openssh.com, so now my .ssh/config file has these lines:

Compression=no
Ciphers=chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com

The compression is disabled by default, but that line just be there to remind me not to enable it again. Now my rsync is 2.5x faster, but still slower than 100Mbit/s.

5 Likes