PyOpenSSL with hardware decryption support

Want something added? Ask for it here.
Post Reply
Cpuroast
Release Testers
Release Testers
Posts: 69
Joined: December 15th, 2010, 11:19 pm

PyOpenSSL with hardware decryption support

Post by Cpuroast »

Hi Shypike,

Something to keep an eye on:
http://bazaar.launchpad.net/~stuart-mcl ... vision/168

Add call for load_builtin_engines(). This
enables the use of any available hardware
acceleration for performance.

Not sure if it's been committed to mainline pyopenssl yet.

Synology is starting to ship NAS devices with freescale ppc cpus and these cpus come with a hardware decryption/encryption engine.
Also, all modern Intel/AMD cpus have AES-NI. This has been in Intel CPUs since Westmere.

Supporting the hardware engine essentially means "free" SSL in terms of CPU cycles.
This is especially important for these new low-power 1ghz Dual-core Freescale PPCs cpus that are starting to find their way into NASes as an Atom alternative.

Also I noticed SAB is still using 0.11 which is 2 years old, 0.13 is out: https://launchpad.net/pyopenssl/main/0.13
User avatar
shypike
Administrator
Administrator
Posts: 19773
Joined: January 18th, 2008, 12:49 pm

Re: PyOpenSSL with hardware decryption support

Post by shypike »

The OpenSSL libraries are very awkward things to use and we've had loads of problems with them.
That's the reason we seldom change them, especially not in maintenance releases.
Something to consider for 0.8.0.
BTW: for NAS systems you need to approach the package creators.
SABnzbd uses whatever is on the system or in the package.
There are only two exceptions to this: the Windows and the OSX binaries.

Thanks for the tip.
Post Reply