Re: Is OpenSSL AES-NI not available in pgcrypto?

On 02.01.23 17:57, agharta82(at)gmail(dot)com wrote:
> select pgp_sym_encrypt(data::text, 'pwd') --default to aes128
> from generate_series('2022-01-01'::timestamp, '2022-12-31'::timestamp,
> '1 hour'::interval) data
>
> vs
>
> select pgp_sym_encrypt(data::text, 'pwd','cipher-algo=bf') -- blowfish
> from generate_series('2022-01-01'::timestamp, '2022-12-31'::timestamp,
> '1 hour'::interval) data
>
> In my test both queries execution is similar....aes-128 was expected
> about  5 time faster.
>
> So, why?
>
> Pgcrypto use OpenSSL as backend, so, does it explicit force software aes
> calculation instead of AES-NI cpu ones?

I suspect it is actually using AES hardware support, but all the other
overhead of pgcrypto makes the difference not noticeable.