On Fri, Feb 3, 2017 at 1:55 PM, Chris Clark <[hidden email]> wrote:
> My application links to OpenSSL 1.1.0 dynamically, and I would like to
> be able to determine if the CPU supports the AES-NI instruction set.
> Is there an OpenSSL API that can do this?
Also note that even though the machine is capable of AES-NI, it does
not mean OpenSSL will use the hardware acceleration. If you call
AES_encrypt (and friends), then you get the "software-only"
implementation. If you disable the feature in the environment with
OPENSSL_ia32cap="~0x200000200000000", then you get the "software-only"
To use AES-NI, and other hardware accelerators like ARMv8's
instructions, you have to use the EVP interface.