aboutsummaryrefslogtreecommitdiffstats
path: root/target
diff options
context:
space:
mode:
authorStijn Tintel <stijn@linux-ipv6.be>2017-01-04 00:15:23 +0100
committerStijn Tintel <stijn@linux-ipv6.be>2017-01-04 13:19:58 +0100
commit301301da2b2998177d4c34521f933c828972a985 (patch)
tree9ba8cba71e3487a83dd5588717f0299305de513d /target
parent2406b3488fb778b76bf86ace3d9796b5ea9e606d (diff)
downloadupstream-301301da2b2998177d4c34521f933c828972a985.tar.gz
upstream-301301da2b2998177d4c34521f933c828972a985.tar.bz2
upstream-301301da2b2998177d4c34521f933c828972a985.zip
x86/64: enable AES-NI support in kernel
The kernel will detect if the host supports this, so we can just enable it in the kernel config. Tested on an APU2 with AES-NI support and a KVM VM on a Xeon E5520 host without AES-NI support. Throughput over an IPsec tunnel between these 2 hosts increased from ~63Mbps to ~140Mbps. Ciphers: AES_GCM_16_256/PRF_HMAC_SHA2_512/ECP_521. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
Diffstat (limited to 'target')
-rw-r--r--target/linux/x86/64/config-default3
1 files changed, 2 insertions, 1 deletions
diff --git a/target/linux/x86/64/config-default b/target/linux/x86/64/config-default
index 5cdbc74b23..791c1f2191 100644
--- a/target/linux/x86/64/config-default
+++ b/target/linux/x86/64/config-default
@@ -52,7 +52,8 @@ CONFIG_CALGARY_IOMMU_ENABLED_BY_DEFAULT=y
CONFIG_CONNECTOR=y
CONFIG_CPU_RMAP=y
CONFIG_CRC_T10DIF=y
-# CONFIG_CRYPTO_AES_X86_64 is not set
+CONFIG_CRYPTO_AES_X86_64=y
+CONFIG_CRYPTO_AES_NI_INTEL=y
# CONFIG_CRYPTO_BLOWFISH_X86_64 is not set
# CONFIG_CRYPTO_CAMELLIA_AESNI_AVX2_X86_64 is not set
# CONFIG_CRYPTO_CAMELLIA_AESNI_AVX_X86_64 is not set