- Acc - mailweb.openeuler.org

[PATCH 1/2] cipher: adding an iv update to a decryption
by Kai Ye 12 May '22

12 May '22

Adding an iv update to de-crypto method as cbc mode. the dst address should not be changed. So fix it. Signed-off-by: Kai Ye <yekai13(a)huawei.com> --- src/uadk_cipher.c | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) diff --git a/src/uadk_cipher.c b/src/uadk_cipher.c index 8a2c39d..5dd2178 100644 --- a/src/uadk_cipher.c +++ b/src/uadk_cipher.c @@ -764,8 +764,9 @@ static void uadk_cipher_update_priv_ctx(struct cipher_priv_ctx *priv) switch (priv->setup.mode) { case WD_CIPHER_CBC: if (priv->req.op_type == WD_CIPHER_ENCRYPTION) { - priv->req.dst += priv->req.in_bytes; - memcpy(priv->iv, priv->req.dst - iv_bytes, iv_bytes); + memcpy(priv->iv, priv->req.dst + priv->req.in_bytes - iv_bytes, iv_bytes); + } else { + memcpy(priv->iv, priv->req.src + priv->req.in_bytes - iv_bytes, iv_bytes); } break; case WD_CIPHER_OFB: @@ -777,11 +778,9 @@ static void uadk_cipher_update_priv_ctx(struct cipher_priv_ctx *priv) break; case WD_CIPHER_CFB: if (priv->req.op_type == WD_CIPHER_ENCRYPTION) { - priv->req.dst += priv->req.in_bytes; - memcpy(priv->iv, priv->req.dst - iv_bytes, iv_bytes); + memcpy(priv->iv, priv->req.dst + priv->req.in_bytes - iv_bytes, iv_bytes); } else { - priv->req.src += priv->req.in_bytes; - memcpy(priv->iv, priv->req.src - iv_bytes, iv_bytes); + memcpy(priv->iv, priv->req.src + priv->req.in_bytes - iv_bytes, iv_bytes); } break; case WD_CIPHER_CTR: -- 2.33.0

1 1

UADK周例会
by openEuler conference 19 Apr '22

19 Apr '22

您好！ sig-AccLib SIG 邀请您参加 2022-04-20 11:00 召开的ZOOM会议会议主题：UADK周例会会议内容：会议链接：https://linaro-org.zoom.us/j/91879279131 邮件列表：acc(a)openeuler.xn--org,-325fl19d9e1dyuu0lv. 1.需求进展。2.自由讨论。会议链接：https://us06web.zoom.us/j/84784486453?pwd=dzJ2N1BldjcyVUswOGk2cmpvZUhtUT09 温馨提醒：建议接入会议后修改参会人的姓名，也可以使用您在gitee.com的ID 更多资讯尽在：https://openeuler.org/zh/ Hello! openEuler sig-AccLib SIG invites you to attend the ZOOM conference will be held at 2022-04-20 11:00, The subject of the conference is UADK周例会, Summary: 会议链接：https://linaro-org.zoom.us/j/91879279131 邮件列表：acc(a)openeuler.xn--org,-325fl19d9e1dyuu0lv. 1.需求进展。2.自由讨论。 You can join the meeting at https://us06web.zoom.us/j/84784486453?pwd=dzJ2N1BldjcyVUswOGk2cmpvZUhtUT09. Note: You are advised to change the participant name after joining the conference or use your ID at gitee.com. More information: https://openeuler.org/en/

1 0

openEuler ODD SIG-AccLib 会议通知详情 [4月14日上午 10:00-12:00]
by fanghao (A) 13 Apr '22

13 Apr '22

Hello everyone, 4月14日SIG组工作会议会前提醒： sig-AccLib：会议时间：4月14日 10:00-12:00 参会链接： https://us06web.zoom.us/j/82166003143?pwd=UjV5cDkra0xqYXJXazdyMGxiRTIwdz09 文档链接： https://etherpad.openeuler.org/p/openEuler2209-sig-AccLib-ODD 注意事项 1、请确保关键与会人员知悉参会链接，并提前5-10min进场。 2、确保准时结束会议，延后会影响后面SIG工作组会议的召开。 3、会前及时把议题内容更新到etherpad。 4、会中请务必安排人员进行会议纪要，会议纪要需要更新到etherpad。 Thanks, Hao

1 0

[RFC 0/2] UADK/comp add uadk wrapper for zlib
by Yang Shen 06 Apr '22

06 Apr '22

Add uadk wrapper for zlib. And to adapt for zlib, add a new api for wd_comp. Yang Shen (2): uadk/comp - support reset session zlibwrapper: add zlibwrapper to adapt for zlib interface Makefile.am | 2 +- include/wd_comp.h | 6 + wd_comp.c | 15 ++ wd_zlibwrapper.c | 472 ++++++++++++++++++++++++++++++++++++++++++++++ wd_zlibwrapper.h | 87 +++++++++ 5 files changed, 581 insertions(+), 1 deletion(-) create mode 100644 wd_zlibwrapper.c create mode 100644 wd_zlibwrapper.h -- 2.24.0

1 2

openEuler Developer Day 2022- AccLib SIG专场工作会议需求收集
by fanghao (A) 03 Apr '22

03 Apr '22

Hello everyone, openEuler Developer Day 2022 （简称 ODD 2022），会议介绍 https://www.openeuler.org/zh/interaction/summit-list/devday2022/ 大会第二天4月14日将会是SIG的专场直播会议，SIG组围绕22.09版本规划开展工作会议。现在是需求问题收集阶段，大家可以提前在etherpad上编辑共享文档的方式提交讨论议题。 1、编辑参会人员信息。 2、编辑议题。链接如下： https://etherpad.openeuler.org/p/openEuler2209-sig-AccLib-ODD Thanks. Hao Fang

1 1

[PATCH] cipher: optimize the process of ctx initialization
by Kai Ye 02 Apr '22

02 Apr '22

Optimize the process of ctx initialization as switching to soft work. If the ctx resources of a thread are insufficient at the beginning, the thread can't apply for resources again. Therefore, an flag checking is required. Signed-off-by: Kai Ye <yekai13(a)huawei.com> --- src/uadk_cipher.c | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/src/uadk_cipher.c b/src/uadk_cipher.c index 5ebad64..be75233 100644 --- a/src/uadk_cipher.c +++ b/src/uadk_cipher.c @@ -847,8 +847,8 @@ static void uadk_e_ctx_init(EVP_CIPHER_CTX *ctx, struct cipher_priv_ctx *priv) struct sched_params params = {0}; int ret; - priv->req.iv_bytes = EVP_CIPHER_CTX_iv_length(ctx); - priv->req.iv = priv->iv; + if (priv->switch_flag == UADK_DO_SOFT) + return; ret = uadk_e_init_cipher(); if (unlikely(!ret)) { @@ -857,6 +857,9 @@ static void uadk_e_ctx_init(EVP_CIPHER_CTX *ctx, struct cipher_priv_ctx *priv) return; } + priv->req.iv_bytes = EVP_CIPHER_CTX_iv_length(ctx); + priv->req.iv = priv->iv; + /* * The internal RR scheduler used by environment variables, * the cipher algorithm does not distinguish between -- 2.33.0

1 0

[PATCH] drv/sec - modification for clean code
by Kai Ye 01 Apr '22

01 Apr '22

1. Delete some debug code. Debug code is not allowed in the release version. 2. Fix a code style issue in sec drv exit. Signed-off-by: Kai Ye <yekai13(a)huawei.com> --- drv/hisi_sec.c | 67 ++++++-------------------------------------------- 1 file changed, 7 insertions(+), 60 deletions(-) diff --git a/drv/hisi_sec.c b/drv/hisi_sec.c index 16fcb5f..96a2e3c 100644 --- a/drv/hisi_sec.c +++ b/drv/hisi_sec.c @@ -486,20 +486,6 @@ static int g_hmac_a_alg[WD_DIGEST_TYPE_MAX] = { int hisi_sec_init(struct wd_ctx_config_internal *config, void *priv); void hisi_sec_exit(void *priv); -#ifdef DEBUG -static void sec_dump_bd(unsigned char *bd, unsigned int len) -{ - unsigned int i; - - for (i = 0; i < len; i++) { - WD_ERR("\\0x%02x", bd[i]); - if ((i + 1) % WORD_BYTES == 0) - WD_ERR("\n"); - } - WD_ERR("\n"); -} -#endif - /* increment counter (128-bit int) by software */ static void ctr_iv_inc(__u8 *counter, __u32 c) { @@ -1290,11 +1276,6 @@ static void parse_digest_bd2(struct hisi_sec_sqe *sqe, recv_msg->data_fmt = hisi_sec_get_data_fmt_v2(sqe->sds_sa_type); recv_msg->in = (__u8 *)(uintptr_t)sqe->type2.data_src_addr; recv_msg->alg_type = WD_DIGEST; - -#ifdef DEBUG - WD_ERR("Dump digest recv sqe-->!\n"); - sec_dump_bd((unsigned char *)sqe, SQE_BYTES_NUMS); -#endif } static int digest_long_bd_check(struct wd_digest_msg *msg) @@ -1389,11 +1370,6 @@ int hisi_sec_digest_send(handle_t ctx, struct wd_digest_msg *msg) qm_fill_digest_long_bd(msg, &sqe); -#ifdef DEBUG - WD_ERR("Dump digest send sqe-->!\n"); - sec_dump_bd((unsigned char *)&sqe, SQE_BYTES_NUMS); -#endif - sqe.type2.tag = msg->tag; ret = hisi_qm_send(h_qp, &sqe, 1, &count); if (ret < 0) { @@ -1545,11 +1521,6 @@ int hisi_sec_digest_send_v3(handle_t ctx, struct wd_digest_msg *msg) qm_fill_digest_long_bd3(msg, &sqe); -#ifdef DEBUG - WD_ERR("Dump digest send sqe-->!\n"); - sec_dump_bd((unsigned char *)&sqe, SQE_BYTES_NUMS); -#endif - sqe.tag = (__u64)(uintptr_t)msg->tag; ret = hisi_qm_send(h_qp, &sqe, 1, &count); @@ -1590,11 +1561,6 @@ static void parse_digest_bd3(struct hisi_sec_sqe3 *sqe, recv_msg->data_fmt = hisi_sec_get_data_fmt_v3(sqe->bd_param); recv_msg->in = (__u8 *)(uintptr_t)sqe->data_src_addr; recv_msg->alg_type = WD_DIGEST; - -#ifdef DEBUG - WD_ERR("Dump digest recv sqe-->!\n"); - sec_dump_bd((unsigned char *)sqe, SQE_BYTES_NUMS); -#endif } int hisi_sec_digest_recv_v3(handle_t ctx, struct wd_digest_msg *recv_msg) @@ -1894,11 +1860,6 @@ int hisi_sec_aead_send(handle_t ctx, struct wd_aead_msg *msg) fill_aead_bd2_addr(msg, &sqe); -#ifdef DEBUG - WD_ERR("Dump aead send sqe-->!\n"); - sec_dump_bd((unsigned char *)&sqe, SQE_BYTES_NUMS); -#endif - sqe.type2.tag = (__u16)msg->tag; ret = hisi_qm_send(h_qp, &sqe, 1, &count); @@ -1948,11 +1909,6 @@ static void parse_aead_bd2(struct hisi_sec_sqe *sqe, SEC_AUTH_LEN_MASK; recv_msg->out_bytes = sqe->type2.clen_ivhlen + sqe->type2.cipher_src_offset; - -#ifdef DEBUG - WD_ERR("Dump aead recv sqe-->!\n"); - sec_dump_bd((unsigned char *)sqe, SQE_BYTES_NUMS); -#endif } int hisi_sec_aead_recv(handle_t ctx, struct wd_aead_msg *recv_msg) @@ -2163,11 +2119,6 @@ int hisi_sec_aead_send_v3(handle_t ctx, struct wd_aead_msg *msg) fill_aead_bd3_addr(msg, &sqe); -#ifdef DEBUG - WD_ERR("Dump aead send sqe-->!\n"); - sec_dump_bd((unsigned char *)&sqe, SQE_BYTES_NUMS); -#endif - sqe.tag = msg->tag; ret = hisi_qm_send(h_qp, &sqe, 1, &count); if (ret < 0) { @@ -2216,11 +2167,6 @@ static void parse_aead_bd3(struct hisi_sec_sqe3 *sqe, SEC_MAC_LEN_MASK; recv_msg->out_bytes = sqe->c_len_ivin + sqe->cipher_src_offset; - -#ifdef DEBUG - WD_ERR("Dump aead recv sqe-->!\n"); - sec_dump_bd((unsigned char *)sqe, SQE_BYTES_NUMS); -#endif } int hisi_sec_aead_recv_v3(handle_t ctx, struct wd_aead_msg *recv_msg) @@ -2305,16 +2251,17 @@ out: void hisi_sec_exit(void *priv) { - if (!priv) { - WD_ERR("hisi sec exit input parameter is err!\n"); - return; - } - struct hisi_sec_ctx *sec_ctx = priv; - struct wd_ctx_config_internal *config = &sec_ctx->config; + struct wd_ctx_config_internal *config; handle_t h_qp; int i; + if (!sec_ctx) { + WD_ERR("hisi sec exit input parameter is err!\n"); + return; + } + + config = &sec_ctx->config; for (i = 0; i < config->ctx_num; i++) { h_qp = (handle_t)wd_ctx_get_priv(config->ctxs[i].ctx); hisi_qm_free_qp(h_qp); -- 2.33.0

1 0

[PATCH] utils: add glibc version checking for uadk_memcpy
by Kai Ye 01 Apr '22

01 Apr '22

No assembly language is required as glibc version >= 2.32. This is because the later glibc version has updated this optimization. Signed-off-by: Kai Ye <yekai13(a)huawei.com> --- src/uadk_utils.c | 17 +++++++++++++++-- 1 file changed, 15 insertions(+), 2 deletions(-) diff --git a/src/uadk_utils.c b/src/uadk_utils.c index 2b34b3a..6e91ba2 100644 --- a/src/uadk_utils.c +++ b/src/uadk_utils.c @@ -14,9 +14,20 @@ * limitations under the License. * */ +#include <gnu/libc-version.h> #include "uadk_utils.h" -#define UADK_MEM_IMPROVE_THRESHOLD 1024 +#define GLIBC_MAIN 2U +#define GLIBC_MINOR 32U +#define UADK_MEM_IMPROVE_THRESHOLD 1024U + +#if __ARM_NEON && defined(__GLIBC__) && defined(__GLIBC_MINOR__) +#define LIBC_VERSION_PREREQ(major, minor) \ + ((__GLIBC__ * 10000 + __GLIBC_MINOR__ * 100) < \ + (major * 10000 + minor * 100)) +#else +#define LIBC_VERSION_PREREQ(major, minor) 0 +#endif static void *memcpy_large(void *dstpp, const void *srcpp, size_t len) { @@ -56,7 +67,9 @@ static void *memcpy_large(void *dstpp, const void *srcpp, size_t len) void *uadk_memcpy(void *dstpp, const void *srcpp, size_t len) { - if (len >= UADK_MEM_IMPROVE_THRESHOLD) + /* No assembly language is required as glibc version >= 2.32 */ + if (len >= UADK_MEM_IMPROVE_THRESHOLD && + LIBC_VERSION_PREREQ(GLIBC_MAIN, GLIBC_MINOR)) return memcpy_large(dstpp, srcpp, len); else return memcpy(dstpp, srcpp, len); -- 2.33.0

3 2

[PATCH 1/2] uadk: Add quick start document for UADK
by Zhiqi Song 01 Apr '22

01 Apr '22

A quick start document is added to help users of OpenEuler quickly start using UADK and UADK engine. Signed-off-by: Zhiqi Song <songzhiqi1(a)huawei.com> --- UADK_quick_start.md | 567 ++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 567 insertions(+) create mode 100644 UADK_quick_start.md diff --git a/UADK_quick_start.md b/UADK_quick_start.md new file mode 100644 index 00000000..64d070b6 --- /dev/null +++ b/UADK_quick_start.md @@ -0,0 +1,567 @@ +# UADK �� +- [UADK ��](#uadk-��) + - [1 ��](#1-��) + - [1.1 UADK](#11-uadk) + - [1.2 UADK engine](#12-uadk-engine) + - [1.3 ��](#13-��) + - [2 ��](#2-��) + - [2.1 ��](#21-��) + - [2.2 ��](#22-��) + - [2.2.1 ��](#221-��) + - [2.2.2 ��](#222-��) + - [2.3 ��](#23-��) + - [3 ��](#3-��) + - [3.1 UADK ��](#31-uadk-��) + - [3.1.1 yum��](#311-yum��) + - [3.1.2 RPM��](#312-rpm��) + - [3.1.3 ��](#313-��) + - [3.2 ��UACCE��](#32-��uacce��) + - [3.3 ��](#33-��) + - [3.4 ��](#34-��) + - [3.5 UADK engine ��](#35-uadk-engine-��) + - [3.5.1 yum��](#351-yum��) + - [3.5.2 RPM��](#352-rpm��) + - [3.5.3 ��](#353-��) + - [4 ��](#4-��) + - [4.1 ��UADK](#41-��uadk) + - [4.1.1 ��](#411-��) + - [4.1.2 ��](#412-��) + - [4.2 ��UADK engine](#42-��uadk-engine) + - [4.2.1 ��](#421-��) + - [4.2.2 ��](#422-��) +---- + +## 1 �� +��UADK �� UADK engine�� +��UADK ��UADK engine�� +### 1.1 UADK +UADK��User Space Accelerator Development Kit��SVA��Shared Virtual Address��UADK��UACCE��Unified/User-space-access-intended Accelerator Framework��SVA��UADK�� + +UADK��UACCE��SVA��IOMMU��SVA��UACCE��,��UADK�� +- AES��SM4��DES��SM3��SHAx��MD5��AEAD��HMAC�� +- RSA��DH�� +- gzip��zlib�� + +��Kunpeng��UACCE��UADK��CPU��CPU�� +### 1.2 UADK engine +UADK engine��UADK��OpenSSL��engine��UADK engine��OpenSSL��OpenSSL�� + +UADK engine��RSA engine��DH engine��ECC engine��Cipher engine��Digest engine��5��UADK��UADK engine��OpenSSL��OpenSSL��engine id��uadk_engine��UADK engine�� +- RSA engine�� +- DH engine�� +- Cipher engine�� +- Digest engine�� + +��Kunpeng��UADK��OpenSSL��OpenSSL��UADK engine��Kunpeng�� + +### 1.3 �� +�� Web�� + +----------- + +## 2 �� +��Kunpeng��UADK��UADK engine�� +### 2.1 �� +��UADK��Kunpeng��9xx��CPU �� +### 2.2 �� +#### 2.2.1 �� +OpenEuler 22.03�� +��IOMMU & SVA�� +#### 2.2.2 �� +OpenSSL 1.1.1a�� +### 2.3 �� +��UADK ��UADK engine �� + +gcc version 10.2.0 (GCC) + +-------- + +## 3 �� +��Kunpeng��UADK��UADK engine�� +��Kunpeng��UADK�� +### 3.1 UADK �� +UADK��yum��RPM�� +#### 3.1.1 yum�� +��OpenEuler 22.03��yum�� +``` +yum install libwd +``` +#### 3.1.2 RPM�� +��OpenEuler��UADK rpm��https://gitee.com/src-openeuler/libwd + +�� +``` +cd /usr/src/ + +git clone https://gitee.com/src-openeuler/libwd.git + +mkdir -p /root/rpmbuild + +cd /root/rpmbuild + +mkdir BUILD BUILDROOT RPMS SOURCES SPECS SRPMS + +cp /usr/src/libwd/libwd*.tar.gz /usr/src/libwd/*patch /root/rpmbuild/SOURCES/ + +cp /usr/src/libwd/warpdrive.spec /root/rpmbuild/SPECS/ + +rpmbuild --bb SPECS/warpdrive.spec + +rpm -ivh /root/rpmbuild/RPMS/aarch64/libwd*.rpm +``` +#### 3.1.3 �� +��Linaro��UADK��https://github.com/Linaro/uadk + +�� +https://github.com/Linaro/uadk/blame/master/INSTALL + +### 3.2 ��UACCE�� +��uacce.ko�� + +��```modprobe uacce``` ��```insmod /lib/modules/$(uname -r)/uacce.ko``` + +### 3.3 �� +��Kunpeng�� + +| �� | �� | +|---|---| +HPRE|uacce.ko, hisi_qm.ko, hisi_hpre.ko| +ZIP|uacce.ko, hisi_qm.ko, hisi_zip.ko| +SEC|uacce.ko, hisi_qm.ko, hisi_sec2.ko| + +�� +hisi_hpre.ko/hisi_zip.ko/hisi_sec2.ko��uacce_mode��uacce_mode=1��SVA��uacce_mode=2��no-SVA�� +��Kunpeng��uacce��uacce.ko��Kunpeng��ZIP��HPRE��SEC��QM��uacce.ko��hisi_qm.ko��ZIP��HPRE��SEC�� + +��insmod��modprobe�� + +modprobe�� +- ��HPRE��SVA�� + ``` + modprobe hisi_hpre uacce_mode=1 + ``` +- ��SEC��SVA�� + ``` + modprobe hisi_sec2 uacce_mode=1 + ``` +- ��ZIP��SVA�� + ``` + modprobe hisi_zip uacce_mode=1 + ``` + +insmod�� +- ��HPRE��SVA�� + ``` + insmod /lib/modules/$(uname -r)/uacce.ko + insmod /lib/modules/$(uname -r)/hisi_qm.ko + insmod /lib/modules/$(uname -r)/hisi_zip.ko uacce_mode=1 + ``` + +- ��SEC��SVA�� + ``` + insmod /lib/modules/$(uname -r)/uacce.ko + insmod /lib/modules/$(uname -r)/hisi_qm.ko + insmod /lib/modules/$(uname -r)/hisi_sec2.ko uacce_mode=1 + ``` + +- ��ZIP��SVA�� + ``` + insmod /lib/modules/$(uname -r)/uacce.ko + insmod /lib/modules/$(uname -r)/hisi_qm.ko + insmod /lib/modules/$(uname -r)/hisi_hpre.ko uacce_mode=1 + ``` +�� + +��```cat /sys/bus/pci/drivers/<driver>/module/parameters/``` �� + +- �� + ``` + insmod <driver> [uacce_mode] [pf_q_num] [vfs_num] [sgl_sge_nr] [ctx_q_num] + ``` + + ``` + modprobe <driver_name> [uacce_mode] [pf_q_num] [vfs_num] [sgl_sge_nr] [ctx_q_num] + ``` + - []�� + - ��uacce_mode��0��uacce_mode=1�� + - SEC��pf_q_num��256��HPRE/ZIP��pf_q_num��64�� + - ��vfs_num��0�� + - ��sgl_sge_nr��10�� + - ��ctx_q_num��2�� + + ��ZIP�� + ``` + insmod /lib/modules/$(uname -r)/hisi_zip.ko uacce_mode=1 pf_q_num =16 vfs_num=1 sgl_sge_nr=16 + ``` + - ��SVA��uacce_mode=1�� + +### 3.4 �� +��Kunpeng�� +``` +modprobe -r hisi_hpre +``` +�� +``` +rmmod hisi_hpre +``` + +### 3.5 UADK engine �� +UADK engine��yum��RPM�� +#### 3.5.1 yum�� +��OpenEuler 22.03��yum�� +``` +yum install uadk_engine +``` +#### 3.5.2 RPM�� +��OpenEuler��uadk_engine rpm��https://gitee.com/src-openeuler/uadk_engine + +�� +``` +cd /usr/src/ + +git clone https://gitee.com/src-openeuler/uadk_engine.git + +mkdir -p /root/rpmbuild + +cd /root/rpmbuild + +mkdir BUILD BUILDROOT RPMS SOURCES SPECS SRPMS + +cp /usr/src/uadk_engine/uadk_engine*.tar.gz /usr/src/uadk_engine/*patch /root/rpmbuild/SOURCES/ + +cp /usr/src/uadk_engine/uadk_engine.spec /root/rpmbuild/SPECS/ + +rpmbuild --bb SPECS/uadk_engine.spec + +rpm -ivh /root/rpmbuild/RPMS/aarch64/uadk_engine*.rpm --prefix=/usr/local/openssl/lib/engines-1.1 + +``` +#### 3.5.3 �� +��Linaro��UADK engine��https://github.com/Linaro/uadk_engine + +�� +https://github.com/Linaro/uadk_engine/blob/master/README + +----------- + +## 4 �� +### 4.1 ��UADK +UADK��UADK��uadk_tool��```uadk_tool benchmark --help```�� +#### 4.1.1 �� +��export��: +``` +export WD_RSA_CTX_NUM="sync:2@0,async:4@0" +export WD_DH_CTX_NUM="sync:2@0,async:4@0" +export WD_CIPHER_CTX_NUM="sync:2@2,async:4@2" +export WD_DIGEST_CTX_NUM="sync:2@2,async:4@2" +``` +��```ctx_mode:ctx_num@node```��node��numa��ctx_num��ctx_mode�� +��```"sync:2@0,async:4@0"```��numa 0��2��sync��4��async�� + +#### 4.1.2 �� +- MD5�� + + ��md5��SVA�� + ``` + uadk_tool benchmark --alg md5 --mode sva --opt 0 --sync --seconds 5 --thread 2 --multi 1 --ctxnum 6 + ``` + +- SM3�� + + ��sm3��SVA�� + ``` + uadk_tool benchmark --alg sm3 --mode sva --opt 0 --sync --seconds 5 --thread 2 --multi 1 --ctxnum 6 + ``` +- SHA�� + + ��sha-512��SVA�� + ``` + uadk_tool benchmark --alg sha-512 --mode sva --opt 0 --sync --seconds 5 --thread 2 --multi 1 --ctxnum 6 + ``` +- AES�� + + ��aes-128-cbc��SVA�� + ``` + uadk_tool benchmark --alg aes-128-cbc --mode sva --opt 0 --sync --pktlen 1024 --seconds 5 --multi 1 --thread 2 --ctxnum 6 + ``` + ��aes-128-cbc��SVA�� + ``` + uadk_tool benchmark --alg aes-128-cbc --mode sva --opt 1 --sync --pktlen 1024 --seconds 5 --multi 1 --thread 2 --ctxnum 6 + ``` + +- SM4�� + + ��sm4-128-ecb��SVA�� + ``` + uadk_tool benchmark --alg sm4-128-ecb --mode sva --opt 0 --sync --pktlen 1024 --seconds 5 --multi 1 --thread 2 --ctxnum 6 + ``` + + ��sm4-128-ecb��SVA�� + ``` + uadk_tool benchmark --alg sm4-128-ecb --mode sva --opt 1 --sync --pktlen 1024 --seconds 5 --multi 1 --thread 2 --ctxnum 6 + ``` + +- DES�� + + ��3des-128-ecb��SVA�� + ``` + uadk_tool benchmark --alg 3des-128-ecb --mode sva --opt 0 --sync --pktlen 1024 --seconds 5 --multi 1 --thread 2 --ctxnum 6 + ``` + + ��3des-128-ecb��SVA�� + ``` + uadk_tool benchmark --alg 3des-128-ecb --mode sva --opt 1 --sync --pktlen 1024 --seconds 5 --multi 1 --thread 2 --ctxnum 6 + ``` +��```uadk_tool benchmark --help```�� + +### 4.2 ��UADK engine +��openssl��uadk engine��openssl�� +#### 4.2.1 �� +UADK engine�� +1. ��openssl.cnf��/usr/local/ssl/�� + ``` + openssl_cnf = openssl_def + [openssl_def] + engines = engine_section + [engine_section] + uadk_engine = uadk_section + [uadk_section] + UADK_CMD_ENABLE_RSA_ENV = 1 + UADK_CMD_ENABLE_DH_ENV = 1 + UADK_CMD_ENABLE_CIPHER_ENV = 1 + UADK_CMD_ENABLE_DIGEST_ENV = 1 + ``` + +2. ��export�� + ``` + export WD_RSA_CTX_NUM="sync:2@0,async:4@0" + export WD_DH_CTX_NUM="sync:2@0,async:4@0" + export WD_CIPHER_CTX_NUM="sync:2@2,async:4@2" + export WD_DIGEST_CTX_NUM="sync:2@2,async:4@2" + ``` + ��```ctx_mode:ctx_num@node```��node��numa��ctx_num��ctx_mode�� +��```"sync:2@0,async:4@0"```��numa 0��2��sync��4��async�� + +#### 4.2.2 �� +- RSA�� + + �� + ``` + openssl genrsa -out prikey.pem -engine uadk_engine 1024 + ``` + �� + ``` + openssl rsa -in prikey.pem -pubout -out pubkey.pem -engine uadk_engine + ``` + ��plain.txt: + ``` + echo "Content to be encrypted" > plain.txt + ``` + �� + ``` + openssl rsautl -encrypt -in plain.txt -inkey pubkey.pem -pubin -out enc.txt -engine uadk_engine + ``` + �� + ``` + openssl rsautl -decrypt -in enc.txt -inkey prikey.pem -out dec.txt -engine uadk_engine + ``` + ��msg.txt: + ``` + echo "Content to be signed" > msg.txt + ``` + �� + ``` + openssl rsautl -sign -in msg.txt -inkey prikey.pem -out signed.txt -engine uadk_engine + ``` + �� + ``` + openssl rsautl -verify -in signed.txt -inkey pubkey.pem -pubin -out verified.txt -engine uadk_engine + ``` + ��openssl speed�� + ``` + openssl speed -elapsed -engine uadk_engine rsa1024 + openssl speed -elapsed -engine uadk_engine -async_jobs 10 rsa1024 + openssl speed -elapsed -engine uadk_engine -async_jobs 36 rsa1024 + ``` +- DH�� + + �� + ``` + openssl dhparam -out dhparam.pem 768 + ``` + ��Alice��: + ``` + openssl genpkey -paramfile dhparam.pem -out alice_prikey.pem -engine uadk_engine + ``` + ��Alice�� + ``` + openssl pkey -in alice_prikey.pem -pubout -out alice_pubkey.pem + ``` + ��Bob�� + ``` + openssl genpkey -paramfile dhparam.pem -out bob_prikey.pem -engine uadk_engine + ``` + ��Bob�� + ``` + openssl pkey -in bob_prikey.pem -pubout -out bob_pubkey.pem + ``` + �� + ``` + openssl pkeyutl -derive -inkey alice_prikey.pem -peerkey bob_pubkey.pem -out secret1.bin -engine uadk_engine + openssl pkeyutl -derive -inkey bob_prikey.pem -peerkey alice_pubkey.pem -out secret2.bin -engine uadk_engine + ``` + �� + ``` + cmp secret1.bin secret2.bin + xxd secret1.bin + xxd secret2.bin + ``` +- MD5�� + + ��data.txt�� + ``` + echo "Content to be hashed" > data.txt + ``` + �� + ``` + openssl md5 -engine uadk_engine data.txt + ``` + openssl speed�� + ``` + openssl speed -engine uadk_engine -async_jobs 1 -evp md5 + ``` +- SM3�� + + ��data.txt�� + ``` + echo "Content to be hashed" > data.txt + ``` + �� + ``` + openssl sm3 -engine uadk_engine data.txt + ``` +- SHA�� + + ��data.txt�� + ``` + echo "Content to be hashed" > data.txt + ``` + �� + ``` + openssl sha1 -engine uadk_engine data.txt + openssl sha256 -engine uadk_engine data.txt + openssl sha512 -engine uadk_engine data.txt + ``` +- AES�� + + ��data.txt�� + ``` + echo "Content to be encrypted" > data + ``` + aes-128-cbc�� + ``` + openssl enc -aes-128-cbc -a -in data -out data.en -pass pass:123456 -K abc -iv abc -engine uadk_engine -p + ``` + aes-128-cbc�� + ``` + openssl enc -aes-128-cbc -a -d -in data.en -out data.de -pass pass:123456 -K abc -iv abc -engine uadk_engine -p + ``` + aes-192-cbc�� + ``` + openssl enc -aes-192-cbc -a -in data -out data.en -pass pass:123456 -K abc -iv abc -engine uadk_engine -p + ``` + aes-192-cbc�� + ``` + openssl enc -aes-192-cbc -a -d -in data.en -out data.de -pass pass:123456 -K abc -iv abc -engine uadk_engine -p + ``` + aes-256-cbc�� + ``` + openssl enc -aes-256-cbc -a -in data -out data.en -pass pass:123456 -K abc -iv abc -engine uadk_engine -p + ``` + aes-256-cbc�� + ``` + openssl enc -aes-256-cbc -a -d -in data.en -out data.de -pass pass:123456 -K abc -iv abc -engine uadk_engine -p + ``` + aes-128-ecb�� + ``` + openssl enc -aes-128-ecb -a -in data -out data.en -pass pass:123456 -K abc -engine uadk_engine -p + ``` + aes-128-ecb�� + ``` + openssl enc -aes-128-ecb -a -d -in data.en -out data.de -pass pass:123456 -K abc -engine uadk_engine -p + ``` + aes-192-ecb�� + ``` + openssl enc -aes-192-ecb -a -in data -out data.en -pass pass:123456 -K abc -engine uadk_engine -p + ``` + aes-192-ecb�� + ``` + openssl enc -aes-192-ecb -a -d -in data.en -out data.de -pass pass:123456 -K abc -engine uadk_engine -p + ``` + aes-256-ecb�� + ``` + openssl enc -aes-256-ecb -a -in data -out data.en -pass pass:123456 -K abc -engine uadk_engine -p + ``` + aes-256-ecb�� + ``` + openssl enc -aes-256-ecb -a -d -in data.en -out data.de -pass pass:123456 -K abc -engine uadk_engine -p + ``` + aes-128-ctr�� + ``` + openssl enc -aes-128-ctr -a -in data -out data.en -pass pass:123456 -K abc -engine uadk_engine -p + ``` + aes-128-ctr�� + ``` + openssl enc -aes-128-ctr -a -d -in data.en -out data.de -pass pass:123456 -K abc -engine uadk_engine -p + ``` + aes-192-ctr�� + ``` + openssl enc -aes-192-ctr -a -in data -out data.en -pass pass:123456 -K abc -engine uadk_engine -p + ``` + aes-192-ctr�� + ``` + openssl enc -aes-192-ctr -a -d -in data.en -out data.de -pass pass:123456 -K abc -engine uadk_engine -p + ``` + aes-256-ctr�� + ``` + openssl enc -aes-256-ctr -a -in data -out data.en -pass pass:123456 -K abc -engine uadk_engine -p + ``` + aes-256-ctr�� + ``` + openssl enc -aes-256-ctr -a -d -in data.en -out data.de -pass pass:123456 -K abc -engine uadk_engine -p + ``` +- SM4�� + + sm4-cbc�� + ``` + openssl enc -sm4-cbc -a -in data -out data.en -pass pass:123456 -K abc -iv abc -engine uadk_engine -p + ``` + sm4-cbc�� + ``` + openssl enc -sm4-cbc -a -d -in data.en -out data.de -pass pass:123456 -K abc -iv abc -engine uadk_engine -p + ``` + sm4-ecb�� + ``` + openssl enc -sm4-ecb -a -in data -out data.en -pass pass:123456 -K abc -iv abc -engine uadk_engine -p + ``` + sm4-ecb�� + ``` + openssl enc -sm4-ecb -a -d -in data.en -out data.de -pass pass:123456 -K abc -iv abc -engine uadk_engine -p + ``` +- DES�� + + des-ede3-cbc�� + ``` + openssl enc -des-ede3-cbc -a -in data -out data.en -pass pass:123456 -K abc -iv abc -engine uadk_engine -p + ``` + des-ede3-cbc�� + ``` + openssl enc -des-ede3-cbc -a -d -in data.en -out data.de -pass pass:123456 -K abc -iv abc -engine uadk_engine -p + ``` + des-ede3-ecb�� + ``` + openssl enc -des-ede3-ecb -a -in data -out data.en -pass pass:123456 -K abc -iv abc -engine uadk_engine -p + ``` + des-ede3-ecb�� + ``` + openssl enc -des-ede3-ecb -a -d -in data.en -out data.de -pass pass:123456 -K abc -iv abc -engine uadk_engine -p -- 2.33.0

1 0

[PATCH] uadk: Add quick start document
by Zhiqi Song 30 Mar '22

30 Mar '22

A quick start document is added to help users quickly start using UADK and UADK engine. Signed-off-by: Zhiqi Song <songzhiqi1(a)huawei.com> --- UADK_quick_start.md | 802 ++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 802 insertions(+) create mode 100644 UADK_quick_start.md diff --git a/UADK_quick_start.md b/UADK_quick_start.md new file mode 100644 index 00000000..db2c0aca --- /dev/null +++ b/UADK_quick_start.md @@ -0,0 +1,802 @@ +# UADK �� +- [UADK ��](#uadk-��) + - [1 ��](#1-��) + - [2 ��](#2��) + - [2.1 ��](#21��) + - [2.2 ��](#22��) + - [2.2.1 ��](#221��) + - [2.2.2 ��](#222��) + - [2.3 ��](#23��) + - [3 ��](#3��) + - [3.1 ��UACCE��](#31��uacce��) + - [3.2 ��](#32��) + - [3.3 ��](#33��) + - [3.4 ��](#34��) + - [3.5 ��UACCE��](#35��uacce��) + - [3.6 ��](#36��) + - [3.7 UADK ��](#37uadk-��) + - [3.7.1 yum��](#371-yum��) + - [3.7.2 RPM��](#372-rpm��) + - [3.7.3 ��](#373-��) + - [3.8 UADK engine ��](#38uadk-engine-��) + - [3.8.1 yum��](#381-yum��) + - [3.8.2 RPM��](#382-rpm��) + - [3.8.3 ��](#383-��) + - [4 ��](#4��) + - [4.1 UADK](#41uadk) + - [4.1.1 ��](#411��) + - [4.1.2 ��RSA��](#412��rsa��) + - [4.1.3 ��DH��](#413��dh��) + - [4.1.4 ��ECDH��](#414��ecdh��) + - [4.1.5 ��ECXDH��](#415��ecxdh��) + - [4.1.6 ��ECDSA��](#416��ecdsa��) + - [4.1.7 ��SM2��](#417��sm2��) + - [4.1.8 ��MD5��](#418��md5��) + - [4.1.9 ��SM3��](#419��sm3��) + - [4.1.10 ��SHA��](#4110��sha��) + - [4.1.11 ��AES��](#4111��aes��) + - [4.1.12 ��SM4��](#4112��sm4��) + - [4.2 ��UADK engine](#42��uadk-engine) + - [4.2.1 ��](#421��) + - [4.2.2 ��RSA��](#422��rsa��) + - [4.2.3 ��DH��](#423��dh��) + - [4.2.4 ��ECDH��](#424��ecdh��) + - [4.2.5 ��ECXDH��](#425��ecxdh��) + - [4.2.6 ��ECDSA��](#426��ecdsa��) + - [4.2.7 ��SM2��](#427��sm2��) + - [4.2.8 ��MD5��](#428��md5��) + - [4.2.9 ��SM3��](#429��sm3��) + - [4.2.10 ��SHA��](#4210��sha��) + - [4.2.11 ��AES��](#4211��aes��) + - [4.2.12 ��SM4��](#4212��sm4��) + - [4.2.13 ��DES��](#4213��des��) +---- + +## 1 �� +��UADK �� UADK engine�� +��UADK ��UADK engine�� +### 1.1 **UADK** +UADK��User Space Accelerator Development Kit��SVA��Shared Virtual Address��**��**��UADK��UACCE��Unified/User-space-access-intended Accelerator Framework��**��SVA��UADK��**�� +��Kunpeng��UACCE��UADK��CPU��CPU�� +### 1.2 **UADK engine** +UADK engine��UADK��OpenSSL��engine��UADK engine��OpenSSL�� +��Kunpeng��UADK��OpenSSL��UADK engine��Kunpeng�� +### 1.3 UADK��&�� +UADK��UACCE��vendor driver��SVA��IOMMU��SVA�� +��UACCE��UADK�� +UADK�� +��Kunpeng��Kunpeng��UADK��UADK��Kunpeng��: +- AES��SM4��SM3��SHAx��AEAD��HMAC�� +- RSA��DH��ECDH��X25519��X448��SM2�� +- gzip��zlib��deflate��lz77_zstd�� +### 1.4 UADK engine��&�� +UADK engine��OpenSSL��RSA engine��DH engine��ECC engine��Cipher engine��Digest engine��5��UADK��UADK engine��OpenSSL ��engine id��uadk_engine�� +��Kunpeng��Kunpeng��UADK��OpenSSL�� +- RSA engine�� +- DH engine �� +- ECC engine �� +- Cipher engine�� +- Digest engine �� +### 1.5 UADK ��UADK engine�� +- �� +- �� +- �� +- Web�� + +----------- + +## 2 �� +��Kunpeng��UADK��UADK engine�� +### 2.1 �� +��UADK��Kunpeng��9xx��CPU �� +### 2.2 �� +#### 2.2.1 �� +OpenEuler�� +Ubuntu�� +CentOS�� +��IOMMU &SVA�� +#### 2.2.2 �� +OpenSSL 1.1.1a��OpenSSL1.1.1l�� +### 2.3 �� +��UADK ��UADK engine �� +gcc version 10.2.0 (GCC) + +-------- + +## 3 �� +��Kunpeng��UADK��UADK engine�� +��Kunpeng��UADK�� +### 3.1 ��UACCE�� +��UACCE��UACCE�� +�� ++ ��Linux�� +Linux��UACCE��Linux�� https://www.kernel.org/ +��UACCE�� + + UACCE�� + <linux /drivers/misc/uacce/> + ++ ��OpenEuler�� +OpenEuler��https://gitee.com/openeuler/kernel + + UACCE�� + <linux /drivers/misc/uacce/> + +### 3.2 �� +��Kunpeng�� +�� ++ ��Linux�� +��Kunpeng��HPRE��SEC��ZIP��Linux��Linux�� https://www.kernel.org/ +��Kunpeng�� + + ��Kunpeng�� + <linux/drivers/crypto/hisilicon/> + ++ ��OpenEuler�� +OpenEuler��https://gitee.com/openeuler/kernel + + ��Kunpeng�� +�� <linux/drivers/crypto/hisilicon/> +### 3.3 �� +��Kunpeng��Kunpeng��config�� + +�� +``` +CONFIG_CRYPTO_DEV_HISI_QM=m +CONFIG_CRYPTO_DEV_HISI_ZIP=m +CONFIG_CRYPTO_DEV_HISI_HPRE=m +CONFIG_CRYPTO_DEV_HISI_SEC2=m +CONFIG_CRYPTO_DEV_HISI_TRNG=m +CONFIG_CRYPTO_DEV_HISI_MIGRATION=m +``` +�� +``` +CONFIG_UACCE=m +``` +��ZIP��HPRE��SEC��TRNG�� + +��SVA�� +``` +CONFIG_IOMMU_SVA_LIB=y +CONFIG_ARM_SMMU_V3_SVA=y +CONFIG_IOMMU_PAGE_FAULT=y +CONFIG_IOMMU_SUPPORT=y +CONFIG_PCI_PASID=y +CONFIG_IOMMU_SVA=y +``` + +�� +``` +CONFIG_VFIO=m +CONFIG_VFIO_PCI=m +``` +### 3.4 �� + +| �� | �� | +|:---|:---| +X86|make ARCH=arm64 CROSS_COMPILE=aarch64-linux-gnu-| +ARM|make ARCH=arm64| + +��kernel�� +### 3.5 ��UACCE�� +��uacce.ko�� +### 3.6 �� +��Kunpeng�� + +| �� | �� | +|---|---| +HPRE|uacce.ko, hisi_qm.ko, hisi_hpre.ko| +ZIP|uacce.ko, hisi_qm.ko, hisi_zip.ko| +SEC|uacce.ko, hisi_qm.ko, hisi_sec2.ko| + +�� +hisi_hpre.ko/hisi_zip.ko/hisi_sec2.ko��uacce_mode��uacce_mode=1��SVA��uacce_mode=2��no-SVA�� +ZIP��HPRE��SEC��QM��hisi_qm.ko��Kunpeng��uacce��uacce.ko�� +��insmod��modprobe�� +- ��HPRE��SVA�� +``` +modprobe uacce +modprobe hisi_qm +modprobe hisi_hpre uacce_mode=1 +``` +- ��ZIP��SVA�� +``` +modprobe uacce +modprobe hisi_qm +modprobe hisi_zip uacce_mode=1 +``` +- ��SEC��SVA�� +``` +modprobe uacce +modprobe hisi_qm +modprobe hisi_sec2 uacce_mode=1 +``` + +- �� + +��```cat /sys/bus/pci/drivers/<driver>/module/parameters/``` �� + +�� +``` +insmod <driver> [uacce_mode] [pf_q_num] [vfs_num] [sgl_sge_nr] [ctx_q_num] +``` +[]�� ++ ��uacce_mode��0��uacce_mode=1�� ++ SEC��pf_q_num��256��HPRE/ZIP��pf_q_num��64�� ++ ��vfs_num��0�� ++ ��sgl_sge_nr��10�� ++ ��ctx_q_num��2�� +��ZIP�� +``` +insmod hisi_zip.ko uacce_mode=1 pf_q_num =16 vfs_num=1 sgl_sge_nr=16 +``` +��SVA��uacce_mode=1�� + +�� + + +### 3.7 UADK �� +UADK��yum��RPM�� + +#### 3.7.1 yum�� +��OpenEuler 22.03��yum�� +yum install libwd + +#### 3.7.2 RPM�� +��OpenEuler��UADK rpm��https://gitee.com/src-openeuler/libwd + +�� +``` +cd /usr/src/ + +git clone https://gitee.com/src-openeuler/libwd.git + +mkdir -p /usr/src/rpmbuild + +cd /usr/src/ rpmbuild + +mkdir SOURCES SPECS BUILD RPMS SRPMS + +cp /usr/src/libwd/libwd-xxx.tar.gz /usr/src/libwd/*patch /usr/src/rpmbuild/SOURCES/ + +cp /usr/src/libwd/warpdrive.spec /usr/src/rpmbuild/SPECS/ + +rpmbuild ��bb SPECS/warpdrive.spec +``` + +#### 3.7.3 �� +��Linaro��UADK��https://github.com/Linaro/uadk +�� +https://github.com/Linaro/uadk/blame/master/INSTALL + +### 3.8 UADK engine �� +UADK engine��yum��RPM�� +#### 3.8.1 yum�� +��OpenEuler 22.03��yum�� +``` +yum install uadk_engine +``` +#### 3.8.2 RPM�� +��OpenEuler��uadk_engine rpm��https://gitee.com/src-openeuler/uadk_engine + +�� +``` +cd /usr/src/ + +git clone https://gitee.com/src-openeuler/uadk_engine.git + +mkdir -p /usr/src/rpmbuild + +cd /usr/src/ rpmbuild + +mkdir SOURCES SPECS BUILD RPMS SRPMS + +cp /usr/src/uadk_engine/uadk_engine-xxx.tar.gz /usr/src/uadk_engine/*patch /usr/src/rpmbuild/SOURCES/ + +cp /usr/src/uadk_engine/ uadk_engine.spec /usr/src/rpmbuild/SPECS/ + +rpmbuild ��bb SPECS/uadk_engine.spec +``` +#### 3.8.3 �� +��Linaro��UADK engine��https://gitee.com/src-openeuler/uadk_engine + +�� +https://github.com/Linaro/uadk_engine/blob/master/README + +----------- + +## 4 �� +### 4.1 UADK +uadk/uadk_tool/��UADK��UADK��uadk_benchmark��```uadk_benchmark --help```��```uadk_benchmark --alglist```�� +#### 4.1.1 �� +��export��: +``` +export WD_RSA_CTX_NUM="sync:2@0,async:4@0" +export WD_DH_CTX_NUM="sync:2@0,async:4@0" +export WD_CIPHER_CTX_NUM="sync:2@2,async:4@2" +export WD_DIGEST_CTX_NUM="sync:2@2,async:4@2" +export WD_ECC_CTX_NUM="sync:2@0,async:4@0" +``` +�� + +#### 4.1.2 ��RSA�� +��rsa-1024��SVA�� +``` +uadk_benchmark --alg rsa-1024 --mode sva --optype 0 --sync --seconds 5 --thread 2 --multi 1 --ctxnum 6 +``` +��rsa-1024��SVA�� +``` +uadk_benchmark --alg rsa-1024 --mode sva --optype 1 --async --seconds 5 --thread 2 --multi 1 --ctxnum 6 +``` + +��uadk_benchmark --help�� +#### 4.1.3 ��DH�� +��dh-1024��SVA�� +``` +uadk_benchmark --alg dh-1024 --mode sva --optype 0 --sync --seconds 5 --thread 2 --multi 1 --ctxnum 6 +``` + +��dh-1024��SVA�� +``` +uadk_benchmark --alg dh-1024 --mode sva --optype 1 --async --seconds 5 --thread 2 --multi 1 --ctxnum 6 +``` + +��uadk_benchmark --help�� + +#### 4.1.4 ��ECDH�� +��ecdh-1024��SVA�� +``` +uadk_benchmark --alg ecdh-1024 --mode sva --optype 0 --sync --seconds 5 --thread 2 --multi 1 --ctxnum 6 +``` + +��ecdh-1024��SVA�� +``` +uadk_benchmark --alg ecdh-1024 --mode sva --optype 1 --async --seconds 5 --thread 2 --multi 1 --ctxnum 6 +``` + +��uadk_benchmark --help�� + +#### 4.1.5 ��ECXDH�� +��x25519��SVA�� +``` +uadk_benchmark --alg x25519 --mode sva --optype 0 --sync --seconds 5 --thread 2 --multi 1 --ctxnum 6 +``` + +��x25519��SVA�� +``` +uadk_benchmark --alg x25519 --mode sva --optype 1 --async --seconds 5 --thread 2 --multi 1 --ctxnum 6 +``` + +��x448��SVA�� +``` +uadk_benchmark --alg x25519 --mode sva --optype 0 --sync --seconds 5 --thread 2 --multi 1 --ctxnum 6 +``` + +��x448��SVA�� +``` +uadk_benchmark --alg x25519 --mode sva --optype 1 --async --seconds 5 --thread 2 --multi 1 --ctxnum 6 +``` + +��uadk_benchmark --help�� + +#### 4.1.6 ��ECDSA�� +��ecdsa-256��SVA�� +``` +uadk_benchmark --alg ecdsa-256 --mode sva --optype 4 --sync --seconds 5 --thread 2 --multi 1 --ctxnum 6 +``` + +��ecdsa-256��SVA�� +``` +uadk_benchmark --alg ecdsa-256 --mode sva --optype 5 --async --seconds 5 --thread 2 --multi 1 --ctxnum 6 +``` + +��uadk_benchmark --help�� + +#### 4.1.7 ��SM2�� +��sm2��SVA�� +``` +uadk_benchmark --alg sm2 --mode sva --optype 4 --sync --seconds 5 --thread 2 --multi 1 --ctxnum 6 +``` + +��sm2��SVA�� +``` +uadk_benchmark --alg sm2 --mode sva --optype 5 --async --seconds 5 --thread 2 --multi 1 --ctxnum 6 +``` + +��uadk_benchmark --help�� + +#### 4.1.8 ��MD5�� +��md5��SVA�� +``` +uadk_benchmark --alg md5 --mode sva --optype 0 --sync --seconds 5 --thread 2 --multi 1 --ctxnum 6 +``` + +��md5��SVA�� +``` +uadk_benchmark --alg md5 --mode sva --optype 0 --async --seconds 5 --thread 2 --multi 1 --ctxnum 6 +``` + +��uadk_benchmark --help�� + +#### 4.1.9 ��SM3�� +��sm3��SVA�� +``` +uadk_benchmark --alg sm3 --mode sva --optype 0 --sync --seconds 5 --thread 2 --multi 1 --ctxnum 6 +``` + +��sm3��SVA�� +``` +uadk_benchmark --alg sm3 --mode sva --optype 0 --async --seconds 5 --thread 2 --multi 1 --ctxnum 6 +``` + +��uadk_benchmark --help�� + +#### 4.1.10 ��SHA�� +��sha-512��SVA�� +``` +uadk_benchmark --alg sha-512 --mode sva --optype 0 --sync --seconds 5 --thread 2 --multi 1 --ctxnum 6 +``` +��sha-512��SVA�� +``` +uadk_benchmark --alg sha-512 --mode sva --optype 0 --async --seconds 5 --thread 2 --multi 1 --ctxnum 6 +``` + +��uadk_benchmark --help�� + +#### 4.1.11 ��AES�� +��aes-128-cbc��SVA�� +``` +uadk_benchmark --alg aes-128-cbc --mode sva --optype 0 --sync --pktlen 1024 --seconds 5 --multi 1 --thread 2 --ctxnum 6 +``` + +��aes-128-cbc��SVA�� +``` +uadk_benchmark --alg aes-128-cbc --mode sva --optype 1 --async --pktlen 1024 --seconds 5 --multi 1 --thread 2 --ctxnum 6 +``` +��uadk_benchmark --help�� + +#### 4.1.12 ��SM4�� +��sm4��SVA�� +``` +uadk_benchmark --alg sm4 --mode sva --optype 0 --sync --pktlen 1024 --seconds 5 --multi 1 --thread 2 --ctxnum 6 +``` + +��sm4��SVA�� +``` +uadk_benchmark --alg sm4 --mode sva --optype 1 --async --pktlen 1024 --seconds 5 --multi 1 --thread 2 --ctxnum 6 +``` +��uadk_benchmark --help�� + +### 4.2 ��UADK engine +��openssl��uadk engine��openssl�� +#### 4.2.1 �� +UADK engine�� +1. ��openssl.cnf��/usr/local/ssl/�� +``` +openssl_cnf = openssl_def +[openssl_def] +engines = engine_section +[engine_section] +uadk_engine = uadk_section +[uadk_section] +UADK_CMD_ENABLE_RSA_ENV = 1 +UADK_CMD_ENABLE_DH_ENV = 1 +UADK_CMD_ENABLE_CIPHER_ENV = 1 +UADK_CMD_ENABLE_DIGEST_ENV = 1 +UADK_CMD_ENABLE_ECC_ENV = 1 +``` + +2. ��export�� +``` +export WD_RSA_CTX_NUM="sync:2@0,async:4@0" +export WD_DH_CTX_NUM="sync:2@0,async:4@0" +export WD_CIPHER_CTX_NUM="sync:2@2,async:4@2" +export WD_DIGEST_CTX_NUM="sync:2@2,async:4@2" +export WD_ECC_CTX_NUM="sync:2@0,async:4@0" +``` + +�� + +#### 4.2.2 ��RSA�� +�� +``` +openssl genrsa -out prikey.pem -engine uadk_engine 1024 +``` +�� +``` +openssl rsa -in prikey.pem -pubout -out pubkey.pem -engine uadk_engine +``` +�� +``` +openssl rsautl -encrypt -in plain.txt -inkey pubkey.pem -pubin -out enc.txt -engine uadk_engine +``` +�� +``` +openssl rsautl -decrypt -in enc.txt -inkey prikey.pem -out dec.txt -engine uadk_engine +``` +�� +``` +openssl rsautl -sign -in msg.txt -inkey prikey.pem -out signed.txt -engine uadk_engine +``` +�� +``` +openssl rsautl -verify -in signed.txt -inkey pubkey.pem -pubin -out verified.txt -engine uadk_engine +``` +��openssl speed�� +``` +openssl speed -elapsed -engine uadk_engine rsa1024 +openssl speed -elapsed -engine uadk_engine -async_jobs 10 rsa1024 +openssl speed -elapsed -engine uadk_engine -async_jobs 36 rsa1024 +``` +#### 4.2.3 ��DH�� +�� +``` +openssl dhparam -out dhparam.pem 768 +``` +��Alice��: +``` +openssl genpkey -paramfile dhparam.pem -out alice_prikey.pem -engine uadk_engine +``` +��Alice�� +``` +openssl pkey -in alice_prikey.pem -pubout -out alice_pubkey.pem +``` +��Bob�� +``` +openssl genpkey -paramfile dhparam.pem -out bob_prikey.pem -engine uadk_engine +``` +��Bob�� +``` +openssl pkey -in bob_prikey.pem -pubout -out bob_pubkey.pem +``` +�� +``` +openssl pkeyutl -derive -inkey alice_prikey.pem -peerkey bob_pubkey.pem -out secret1.bin -engine uadk_engine +openssl pkeyutl -derive -inkey bob_prikey.pem -peerkey alice_pubkey.pem -out secret2.bin -engine uadk_engine +``` +�� +``` +cmp secret1.bin secret2.bin +xxd secret1.bin +xxd secret2.bin +``` +#### 4.2.4 ��ECDH�� +��Alice�� +``` +openssl ecparam -name secp128r1 -genkey -noout -out alice_prikey_secp128r1.pem -engine uadk_engine +``` +�� +``` +openssl pkey -in alice_prikey_secp128r1.pem -text +``` +��Alice�� +``` +openssl pkey -pubout -in alice_prikey_secp128r1.pem -out alice_secp128r1.pub +``` +��Bob�� +``` +openssl ecparam -name secp128r1 -genkey -noout -out bob_prikey_secp128r1.pem -engine uadk_engine +``` +��Bob�� +``` +openssl pkey -pubout -in bob_prikey_secp128r1.pem -out bob_secp128r1.pub +``` +Alice�� +``` +openssl pkeyutl -derive -out alicebob_secp128r1.key -inkey alice_prikey_secp128r1.pem -peerkey bob_secp128r1.pub -engine uadk_engine +``` +Bob�� +``` +openssl pkeyutl -derive -out bobalice_secp128r1.key -inkey bob_prikey_secp128r1.pem -peerkey alice_secp128r1.pub -engine uadk_engine +``` +��Alice��Bob�� +``` +cmp alicebob_secp128r1.key bobalice_secp128r1.key +xxd alicebob_secp128r1.key +xxd bobalice_secp128r1.key +``` +#### 4.2.5 ��ECXDH�� +��Alice�� +``` +openssl genpkey -algorithm X25519 -out alice_x25519_prikey.pem -engine uadk_engine +``` +�� +``` +openssl pkey -in alice_x25519prikey.pem -text +``` +��Alice�� +``` +openssl pkey -pubout -in alice_x25519_prikey.pem -out alice_ x25519.pub +``` +��Bob�� +``` +openssl genpkey -algorithm X25519 -out bob_x25519_prikey.pem -engine uadk_engine +``` +��Bob�� +``` +openssl pkey -pubout -in bob_x25519_prikey.pem -out bob_x25519.pub +``` +Alice�� +``` +openssl pkeyutl -derive -out alicebob_x25519.key -inkey alice_x25519_prikey.pem -peerkey bob_x25519.pub -engine uadk_engine +``` +Bob�� +``` +openssl pkeyutl -derive -out bobalice_x25519.key -inkey bob_x25519_prikey.pem -peerkey alice_ x25519.pub -engine uadk_engine +``` +��Alice��Bob�� +``` +cmp alicebob_x25519.key bobalice_x25519.key +xxd alicebob_x25519.key +xxd bobalice_x25519.key +``` +��X448��genpkey��algorithm��X448��-algorithm X448 +#### 4.2.6 ��ECDSA�� +�� +``` +openssl ecparam -genkey -name secp384r1 -noout -out private.pem -engine uadk_engine +``` +�� +``` +openssl ec -in private.pem -pubout -out public.pem +``` +��msg.txt�� +��SHA256�� +``` +openssl dgst -sha256 -sign private.pem -out ecdsa_384r1.sig -engine uadk_engine msg.txt +``` +��SHA256�� +``` +openssl dgst -sha256 -verify public.pem -signature ecdsa_384r1.sig -engine uadk_engine msg.txt +``` +openssl speed�� +``` +openssl speed -elapsed -engine uadk_engine ecdsap256 +openssl speed -elapsed -engine uadk_engine -async_jobs 1 ecdsap256 +``` +#### 4.2.7 ��SM2�� +�� +``` +openssl ecparam -name SM2 -genkey -out sm2_prikey.pem -engine uadk_engine +``` +�� +``` +openssl ec -in sm2_prikey.pem -pubout -out sm2_pubkey.pem +``` +��msg.txt�� +��SHA256�� +``` +openssl dgst -sha256 -sign sm2_prikey.pem -out sm2.sig -engine uadk_engine msg.txt +``` +��SHA256�� +``` +openssl dgst -sha256 -verify sm2_pubkey.pem -signature sm2.sig -engine uadk_engine msg.txt +``` +#### 4.2.8 ��MD5�� +��data.txt�� +``` +openssl md5 -engine uadk_engine data.txt +``` +openssl speed�� +``` +openssl speed -engine uadk_engine -async_jobs 1 -evp md5 +``` +#### 4.2.9 ��SM3�� +��data.txt�� +``` +openssl sm3 -engine uadk_engine data.txt +``` +#### 4.2.10 ��SHA�� +��data.txt�� +``` +openssl sha1 -engine uadk_engine data.txt +openssl sha256 -engine uadk_engine data.txt +openssl sha512 -engine uadk_engine data.txt +``` +#### 4.2.11 ��AES�� +aes-128-cbc�� +``` +openssl enc -aes-128-cbc -a -in data -out data.en -pass pass:123456 -K abc -iv abc -engine uadk_engine -p +``` +aes-128-cbc�� +``` +openssl enc -aes-128-cbc -a -d -in data.en -out data.de -pass pass:123456 -K abc -iv abc -engine uadk_engine -p +``` +aes-192-cbc�� +``` +openssl enc -aes-192-cbc -a -in data -out data.en -pass pass:123456 -K abc -iv abc -engine uadk_engine -p +``` +aes-192-cbc�� +``` +openssl enc -aes-192-cbc -a -d -in data.en -out data.de -pass pass:123456 -K abc -iv abc -engine uadk_engine -p +``` +aes-256-cbc�� +``` +openssl enc -aes-256-cbc -a -in data -out data.en -pass pass:123456 -K abc -iv abc -engine uadk_engine -p +``` +aes-256-cbc�� +``` +openssl enc -aes-256-cbc -a -d -in data.en -out data.de -pass pass:123456 -K abc -iv abc -engine uadk_engine -p +``` +aes-128-ecb�� +``` +openssl enc -aes-128-ecb -a -in data -out data.en -pass pass:123456 -K abc -iv abc -engine uadk_engine -p +``` +aes-128-ecb�� +``` +openssl enc -aes-128-ecb -a -d -in data.en -out data.de -pass pass:123456 -K abc -iv abc -engine uadk_engine -p +``` +aes-192-ecb�� +``` +openssl enc -aes-192-ecb -a -in data -out data.en -pass pass:123456 -K abc -iv abc -engine uadk_engine -p +``` +aes-192-ecb�� +``` +openssl enc -aes-192-ecb -a -d -in data.en -out data.de -pass pass:123456 -K abc -iv abc -engine uadk_engine -p +``` +aes-256-ecb�� +``` +openssl enc -aes-256-ecb -a -in data -out data.en -pass pass:123456 -K abc -iv abc -engine uadk_engine -p +``` +aes-256-ecb�� +``` +openssl enc -aes-256-ecb -a -d -in data.en -out data.de -pass pass:123456 -K abc -iv abc -engine uadk_engine -p +``` +aes-128-ctr�� +``` +openssl enc -aes-128-ctr -a -in data -out data.en -pass pass:123456 -K abc -iv abc -engine uadk_engine -p +``` +aes-128-ctr�� +``` +openssl enc -aes-128-ctr -a -d -in data.en -out data.de -pass pass:123456 -K abc -iv abc -engine uadk_engine -p +``` +aes-192-ctr�� +``` +openssl enc -aes-192-ctr -a -in data -out data.en -pass pass:123456 -K abc -iv abc -engine uadk_engine -p +``` +aes-192-ctr�� +``` +openssl enc -aes-192-ctr -a -d -in data.en -out data.de -pass pass:123456 -K abc -iv abc -engine uadk_engine -p +``` +aes-256-ctr�� +``` +openssl enc -aes-256-ctr -a -in data -out data.en -pass pass:123456 -K abc -iv abc -engine uadk_engine -p +``` +aes-256-ctr�� +``` +openssl enc -aes-256-ctr -a -d -in data.en -out data.de -pass pass:123456 -K abc -iv abc -engine uadk_engine -p +``` +#### 4.2.12 ��SM4�� +sm4-cbc�� +``` +openssl enc -sm4-cbc -a -in data -out data.en -pass pass:123456 -K abc -iv abc -engine uadk_engine -p +``` +sm4-cbc�� +``` +openssl enc -sm4-cbc -a -d -in data.en -out data.de -pass pass:123456 -K abc -iv abc -engine uadk_engine -p +``` +sm4-ecb�� +``` +openssl enc -sm4-ecb -a -in data -out data.en -pass pass:123456 -K abc -iv abc -engine uadk_engine -p +``` +sm4-ecb�� +``` +openssl enc -sm4-ecb -a -d -in data.en -out data.de -pass pass:123456 -K abc -iv abc -engine uadk_engine -p +``` +#### 4.2.13 ��DES�� +des-ede3-cbc�� +``` +openssl enc -des-ede3-cbc -a -in data -out data.en -pass pass:123456 -K abc -iv abc -engine uadk_engine -p +``` +des-ede3-cbc�� +``` +openssl enc -des-ede3-cbc -a -d -in data.en -out data.de -pass pass:123456 -K abc -iv abc -engine uadk_engine -p +``` +des-ede3-ecb�� +``` +openssl enc -des-ede3-ecb -a -in data -out data.en -pass pass:123456 -K abc -iv abc -engine uadk_engine -p +``` +des-ede3-ecb�� +``` +openssl enc -des-ede3-ecb -a -d -in data.en -out data.de -pass pass:123456 -K abc -iv abc -engine uadk_engine -p +``` -- 2.33.0

2 1