aes_hackery 880 B

12345678910111213141516
  1. o Code simplification and refactoring:
  2. - Unconditionally use OpenSSL's AES implementation instead of our
  3. old built-in one. OpenSSL's AES has been better for a while, and
  4. relatively few servers should still be on any version of OpenSSL
  5. that doesn't have good optimized assembly AES.
  6. o Major features (AES performance):
  7. - Use OpenSSL's EVP interface for AES encryption, so that all
  8. AES operations can use hardware acceleration (if present).
  9. Resolves issue #4442.
  10. - But only use the EVP interface when AES acceleration is enabled,
  11. to avoid a performance regression. Resolves issue #4525.
  12. - When using OpenSSL 1.0.0 or later, use OpenSSL's counter mode
  13. implementation; it makes AES_CTR about 7% faster than our old one
  14. (which was about 10% faster than the one OpenSSL used to provide).
  15. Resolves issue #4526.