From: Stijn Tintel Date: Tue, 3 Jan 2017 23:15:23 +0000 (+0100) Subject: x86/64: enable AES-NI support in kernel X-Git-Url: http://git.lede-project.org./?a=commitdiff_plain;h=301301da2b2998177d4c34521f933c828972a985;p=openwrt%2Fstaging%2Flynxis%2Fomap.git x86/64: enable AES-NI support in kernel The kernel will detect if the host supports this, so we can just enable it in the kernel config. Tested on an APU2 with AES-NI support and a KVM VM on a Xeon E5520 host without AES-NI support. Throughput over an IPsec tunnel between these 2 hosts increased from ~63Mbps to ~140Mbps. Ciphers: AES_GCM_16_256/PRF_HMAC_SHA2_512/ECP_521. Signed-off-by: Stijn Tintel --- diff --git a/target/linux/x86/64/config-default b/target/linux/x86/64/config-default index 5cdbc74b23..791c1f2191 100644 --- a/target/linux/x86/64/config-default +++ b/target/linux/x86/64/config-default @@ -52,7 +52,8 @@ CONFIG_CALGARY_IOMMU_ENABLED_BY_DEFAULT=y CONFIG_CONNECTOR=y CONFIG_CPU_RMAP=y CONFIG_CRC_T10DIF=y -# CONFIG_CRYPTO_AES_X86_64 is not set +CONFIG_CRYPTO_AES_X86_64=y +CONFIG_CRYPTO_AES_NI_INTEL=y # CONFIG_CRYPTO_BLOWFISH_X86_64 is not set # CONFIG_CRYPTO_CAMELLIA_AESNI_AVX2_X86_64 is not set # CONFIG_CRYPTO_CAMELLIA_AESNI_AVX_X86_64 is not set