4 ms·

AMD has shipped AES-NI in every processor family starting with Bulldozer in 2011. Intel started in 2010 with Westmere, but kept it out of the lower-end models

AMD has shipped AES-NI in every processor family starting with Bulldozer in 2011. Intel started in 2010 with Westmere, but kept it out of the lower-end models like Pentium, Celeron, and i3 for several generations. Only since Skylake (2015) is it included in every model produced from a supporting architecture. At least for Intel processors, the generalization above, absent other disclaimers, does not apply. Actual lookup tables are linked in other posts like this one [1]. [1] https://news.ycombinator.com/item?id=14240007 https://news.ycombinator.com/item?id=14240007

paulmd 9y ago
Not Bobcat, unfortunately - which is what's in the PC Engines APUv1.
kop316 9y ago
The immediate predecessor to the Netgate SG-2220 ( I forget the Model, but it was based off of the the PC Engines apu1d [1]) does not support AES-NI. It has the AMD G series T40E, which is based off of the Bobcat architecture [2] [3]). I use pfsense as a home router, and while I am very happy with it, I will be forced to upgrade that hardware, and I do not use any feature sets that require the use of AES-NI. In addition, the Netgate SG-2220 uses an Atom C2338, which was susceptible to the LPC bus failure [4] [5]. So as of right now, I would also be extremely hesitant to purchase the Netgate SG-2220 without some sort of assurance that the router I got is not affected by it. [1] https://pcengines.ch/apu1d4.htm https://pcengines.ch/apu1d4.htm [2] https://en.wikipedia.org/wiki/List_of_AMD_accelerated_processing_unit_microprocessors https://en.wikipedia.org/wiki/List_of_AMD_accelerated_proces... [3] https://en.wikipedia.org/wiki/Bobcat_(microarchitecture) https://en.wikipedia.org/wiki/Bobcat_(microarchitecture) [4] https://www.netgate.com/products/sg-2220.html https://www.netgate.com/products/sg-2220.html [5] http://www.anandtech.com/show/11110/semi-critical-intel-atom-c2000-flaw-discovered http://www.anandtech.com/show/11110/semi-critical-intel-atom... EDIT: Interestingly enough, someone from Netgate said that the PC Engines APU is unaffected: https://www.reddit.com/r/PFSENSE/comments/68nd6y/pfsense_25_and_aesni/dgzrsma/ https://www.reddit.com/r/PFSENSE/comments/68nd6y/pfsense_25_... EDIT2: Seems they edited that, the APU1d won't be compatible.

paulmd 9y ago

Not Bobcat, unfortunately - which is what's in the PC Engines APUv1.

kop316 9y ago

The immediate predecessor to the Netgate SG-2220 ( I forget the Model, but it was based off of the the PC Engines apu1d [1]) does not support AES-NI. It has the AMD G series T40E, which is based off of the Bobcat architecture [2] [3]). I use pfsense as a home router, and while I am very happy with it, I will be forced to upgrade that hardware, and I do not use any feature sets that require the use of AES-NI. In addition, the Netgate SG-2220 uses an Atom C2338, which was susceptible to the LPC bus failure [4] [5]. So as of right now, I would also be extremely hesitant to purchase the Netgate SG-2220 without some sort of assurance that the router I got is not affected by it. [1] https://pcengines.ch/apu1d4.htm https://pcengines.ch/apu1d4.htm [2] https://en.wikipedia.org/wiki/List_of_AMD_accelerated_processing_unit_microprocessors https://en.wikipedia.org/wiki/List_of_AMD_accelerated_proces... [3] https://en.wikipedia.org/wiki/Bobcat_(microarchitecture) https://en.wikipedia.org/wiki/Bobcat_(microarchitecture) [4] https://www.netgate.com/products/sg-2220.html https://www.netgate.com/products/sg-2220.html [5] http://www.anandtech.com/show/11110/semi-critical-intel-atom-c2000-flaw-discovered http://www.anandtech.com/show/11110/semi-critical-intel-atom... EDIT: Interestingly enough, someone from Netgate said that the PC Engines APU is unaffected: https://www.reddit.com/r/PFSENSE/comments/68nd6y/pfsense_25_and_aesni/dgzrsma/ https://www.reddit.com/r/PFSENSE/comments/68nd6y/pfsense_25_... EDIT2: Seems they edited that, the APU1d won't be compatible.