Does Intel Hadoop distribution support the AES-NI encryption feature?

[herp]

I download this distribution and try the Intel Manager UI but I still have no idea to use AES-NI encryption feature.

Does this distribution support this feature?

If it is supported, can you give a introduction document, we need to do some simulation to get the performance comparison.  

Thank You

[Larry Cover]

As far as I know, AES-NI is used for SSL communication between node through OpenSSL. I don't know if there is a way to check this.

[Akshar Dave]

Some commands to help you, On RHEL or CentOS...

To check if AES-NI is enabled, run the following command as the root user:

openssl engine -c -tt

To test its speed, run the following command as root:

openssl speed aes-128-cbc

To test the speed of OpenSSH you can run a command like the following:

dd if=/dev/zero count=100 bs=1M | ssh -c aes128-cbc localhost "cat >/dev/null"

On Thu, May 23, 2013 at 2:42 PM, Akshar Dave <aksha...@gmail.com> wrote:

Herp-

The way I understand is - IDH comes already optimized for Intel AES-NI technology that is built into Intel Xeon processors. 

Take look at this paper - http://software.intel.com/sites/default/files/article/165683/aes-wp-2012-09-22-v01.pdf - that gives an overview of the AES algorithm and Intel's new AES instructions. It provides guidelines and demonstrations for using these instructions to write secure and high performance AES implementations.

Go to URL below to find more relevant info

http://www.intel.com/content/www/us/en/architecture-and-technology/advanced-encryption-standard--aes-/data-protection-aes-general-technology.html

Hope this helps.

Thanks

-- 

Dave

Principal – Big Data

SoftNet Solutions

Office: 408.542.0888 | Mobile: 408.896.1486

940 Hamlin Court, Sunnyvale, CA 94089 

www.softnets.com/bigdata

--
You received this message because you are subscribed to the Google Groups "IDH Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to idh-users+...@googlegroups.com.
To post to this group, send email to idh-...@googlegroups.com.
Visit this group at http://groups.google.com/group/idh-users?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.
 
 

[Akshar Dave]

Herp-

The way I understand is - IDH comes already optimized for Intel AES-NI technology that is built into Intel Xeon processors. 

Take look at this paper - http://software.intel.com/sites/default/files/article/165683/aes-wp-2012-09-22-v01.pdf - that gives an overview of the AES algorithm and Intel's new AES instructions. It provides guidelines and demonstrations for using these instructions to write secure and high performance AES implementations.

Go to URL below to find more relevant info

http://www.intel.com/content/www/us/en/architecture-and-technology/advanced-encryption-standard--aes-/data-protection-aes-general-technology.html

Hope this helps.

Thanks

-- 

Dave

Principal – Big Data

SoftNet Solutions

Office: 408.542.0888 | Mobile: 408.896.1486

940 Hamlin Court, Sunnyvale, CA 94089 

www.softnets.com/bigdata

On Tue, May 21, 2013 at 3:55 AM, herp <herp...@gmail.com> wrote:

--