How to verify AES NI is in use by OpenSSL?

Search Guard
1

Hi,

I want to make sure that AES NI is used by OpenSSL with SearchGuard.

I tried running following through java (used by Elasticsearch), and it shows UseAES is true.

$ java -XX:+PrintFlagsFinal -version | grep UseAES

bool UseAES = true {product}

bool UseAESIntrinsics = true {product}

Can I say AES-NI is used from this? Is there any other way to verify this?

···

Regards,
Hardik Shah.

2

I think this is more of an OpenSSL than a Search Guard question/issue. If OpenSSL is using AES NI on your machine, then Search Guard will use it too, since all TLS related calls are delegated to OpenSSL. It seems that the only way to find out is to run performance tests with and without AES NI enabled.

···

On Saturday, June 30, 2018 at 1:25:03 AM UTC+2, Hardik Shah wrote:

Hi,

I want to make sure that AES NI is used by OpenSSL with SearchGuard.

I tried running following through java (used by Elasticsearch), and it shows UseAES is true.

$ java -XX:+PrintFlagsFinal -version | grep UseAES

bool UseAES = true {product}

bool UseAESIntrinsics = true {product}

Can I say AES-NI is used from this? Is there any other way to verify this?

–
Regards,
Hardik Shah.