00:50 | vagrantc has left IRC (vagrantc!~vagrant@2600:3c01:e000:21:7:77:0:20, Quit: leaving) | |
05:01 | quinox has left IRC (quinox!~quinox@ghost.qtea.nl, Quit: WeeChat 3.5) | |
05:04 | quinox has joined IRC (quinox!~quinox@ghost.qtea.nl) | |
13:54 | bobby99 has joined IRC (bobby99!~bobby99@ip-037-049-023-187.um09.pools.vodafone-ip.de) | |
13:55 | <bobby99> hi. is anyone aware of a way to enable aes-ni for ssh on ubuntu?
| |
14:05 | <alkisg> For LTSP? You can set SSH_OPTIONS in ltsp.conf
| |
14:06 | <bobby99> I know. But how can I enable aes-ni that way?
| |
14:07 | <alkisg> I'm not sure what you mean, it's just an ssh option.
| |
14:07 | man ssh_config, option Cipher, it maps to ssh command line options
| |
14:08 | <bobby99> This option selects the cipher used. It does not select if the cipher runs in software or in hardware.
| |
14:08 | <alkisg> If your hardware supports it ,it will be used. If not, not.
| |
14:09 | There's no software option for "enforce hardware support"...
| |
14:11 | <bobby99> I have run some performance tests, and chacha20 turns out to be faster than aes ciphers. System load also went up during the tests. So I assume that aes-ni ist not used.
| |
14:15 | <alkisg> cat /proc/cpuinfo says if it supports aes
| |
14:16 | <bobby99> I know. I can see "aes" for all the cores.
| |
14:16 | <alkisg> ssh -q cipher says the selected cipher
| |
14:17 | # `ssh -vv $host hostname 2>&1 | grep cipher:` for the selected one
| |
14:17 | # Speed test: yes | pv | ssh $host "cat >/dev/null"
| |
14:17 | # Or: yes | pv | ssh -o "Ciphers=aes128-ctr" $host "cat >/dev/null"
| |
14:32 | In all my tests where aes was supported by hardware, aes128-ctr was the fastest cipher from all of them
| |
14:32 | chacha was only faster in raspberry pis, nowhere else
| |
14:35 | <bobby99> I'll re-check my numbers
| |
14:37 | bobby99 has left IRC (bobby99!~bobby99@ip-037-049-023-187.um09.pools.vodafone-ip.de, Quit: Client closed) | |
15:43 | shored1 has left IRC (shored1!~shored@user/shored, Quit: ZNC 1.8.2+deb2 - https://znc.in) | |
15:43 | shored has joined IRC (shored!~shored@user/shored) | |
20:59 | vagrantc has joined IRC (vagrantc!~vagrant@2600:3c01:e000:21:7:77:0:20) | |
22:53 | MUHWALT has left IRC (MUHWALT!~ubox@user/muhwalt, Quit: WeeChat 3.5) | |
23:32 | oh207_ has joined IRC (oh207_!~oh207@pool-72-69-251-225.nycmny.fios.verizon.net) | |
23:38 | oh207_ has left IRC (oh207_!~oh207@pool-72-69-251-225.nycmny.fios.verizon.net, Ping timeout: 276 seconds) | |