<div dir="ltr"><div>Summary:</div><div>The documentation is still somewhat vague on the best use of the "HardwareAccel" option.</div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><dt class="" style="margin:0px 0px 10px;padding:0px;border:0px;outline:0px;font-weight:bold;font-size:1.5em;font-family:Georgia,'Times New Roman',Times,serif;vertical-align:baseline;color:rgb(35,48,14);line-height:28px"><strong style="margin:0px;padding:0px;border:0px;outline:0px;font-style:inherit;font-size:20px;font-family:inherit;vertical-align:baseline">HardwareAccel</strong> <strong style="margin:0px;padding:0px;border:0px;outline:0px;font-style:inherit;font-size:20px;font-family:inherit;vertical-align:baseline">0</strong>|<strong style="margin:0px;padding:0px;border:0px;outline:0px;font-style:inherit;font-size:20px;font-family:inherit;vertical-align:baseline">1</strong></dt><dd style="margin:0px 0px 18px;padding:0px;border:0px;outline:0px;font-size:13px;font-family:Helvetica,Arial,sans-serif;vertical-align:baseline;line-height:20px;color:rgb(26,26,26)"><p style="margin:0px 0px 18px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-size:1em;font-family:inherit;vertical-align:baseline">If non-zero, try to use built-in (static) crypto hardware acceleration when available. (Default: 0)</p></dd></blockquote><div>I could not find a definitive answer in the archives or in <a href="https://gitweb.torproject.org/tor.git/log/?qt=grep&q=hardwareaccel&showmsg=1">https://gitweb.torproject.org/tor.git/log/?qt=grep&q=hardwareaccel&showmsg=1</a>.</div><div><br></div><div><a href="https://www.torservers.net/wiki/setup/server#aes-ni_crypto_acceleration">https://www.torservers.net/wiki/setup/server#aes-ni_crypto_acceleration</a> claims no intervention is needed in regards of aes-ni accelaration, but I would like to add an explanation or source to this recommendation.<br></div><div><br></div><div>Question_1:</div><div>If my CPU supports and have loaded aesni_intel on linux with OpenSSL is 1.0.1.j-1, should I leave HardwareAccel off or explicitly enable it?</div><div><br></div><div>Question_2:</div><div>What does "<i>built-in (static) crypto hardware acceleration</i>" refer to? Dedicated hardware, CPU-support or...?</div><div><br></div><div>Best regards</div></div>