AES NI

[Jason Nerothin]

When it comes to kernel support, is there a documented list of options available to me as an end user when I bring up an image? Or is it one size fits all?

The specific thing I would like to understand is if it is possible to use AES NI instructions on GCE and if so, how.

Thanks,

Jason

[Jesse Scherer (Google Cloud Support)]

Hey Jason,

When I run 'cat /proc/cpuinfo' on a Sandy Bridge test instance, I see the 'aes' flag. I'm able to simply 'sudo modprobe aesni_intel' from a Debian instance as well.

If you're just asking out of curiosity, then my sample of one says it just works. Or are you having trouble getting particular software to work?

[Jason Nerothin]

Hi Jesse,

I'm attempting to design a scalable CSPRNG service: Supposedly, the right instruction set allows certain block ciphers written in CNT mode to be as performant as stream ciphers. This simplifies the implementation.

Prototyping on GCE would be a lot cheaper than doing it with real hardware. I haven't thought it through to production yet... There's a hypervisor underneath GCE somewhere, so that may affect things.

Thanks,

Jason

--
© 2014 Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043
 
Email preferences: You received this email because you signed up for the Google Compute Engine Discussion Google Group (gce-dis...@googlegroups.com) to participate in discussions with other members of the Google Compute Engine community and the Google Compute Engine Team.
---
You received this message because you are subscribed to a topic in the Google Groups "gce-discussion" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/gce-discussion/8ewiOqDBubE/unsubscribe.
To unsubscribe from this group and all its topics, send an email to gce-discussio...@googlegroups.com.
To post to this group, send email to gce-dis...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/gce-discussion/9d6772cf-f5fd-47ed-9fc7-8eb383019051%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

[Kamran (Google Cloud Support)]

Hello Jason,

To check if your GCE VM's processor supports AES-NI instructions, visit this article.  OpenSSL's EVP interface will ensure the use of platform specific cryptographic acceleration such as AES-NI.

Sincerely,

Kamran

On Tuesday, September 15, 2015 at 2:36:41 PM UTC-4, Jason Nerothin wrote:

[Jason Nerothin]

Thanks, Kamran. 

It should be enough to get started with...

--

© 2014 Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043
 
Email preferences: You received this email because you signed up for the Google Compute Engine Discussion Google Group (gce-dis...@googlegroups.com) to participate in discussions with other members of the Google Compute Engine community and the Google Compute Engine Team.
---
You received this message because you are subscribed to a topic in the Google Groups "gce-discussion" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/gce-discussion/8ewiOqDBubE/unsubscribe.
To unsubscribe from this group and all its topics, send an email to gce-discussio...@googlegroups.com.
To post to this group, send email to gce-dis...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/gce-discussion/4d355e84-2351-4dbe-87c0-ffd46f904b67%40googlegroups.com.