4 ms·
Right now, the bandwidth to modern GPUs is actually pretty decent (16GB/s bidirectional), but the latency is still horrid. This means that you need rather large
by Tuna-Fish 14y ago
Right now, the bandwidth to modern GPUs is actually pretty decent (16GB/s bidirectional), but the latency is still horrid. This means that you need rather large operations for offloading to pay off. I think doing raid-5 or full disk encryption with large blocks might just barely be worth it.
However, with AMD and Intel integrated GPUs, this is about to change. AMD is doing a lot of work on HSA, which can be summarized as "GPU and CPU share same memory, and can communicate by passing pointers". I can see this kind of work being really useful in the near future.
- patrickgzill 14y agoI had thought in the past that storing the index of a database (not the data, just index) on the card and using that to handle complex queries, might be interesting. Not sure if that has a practical, real-world use though.
- dfc 14y agoMore and more CPUs have AES instructions and my old lenovo ideapad has a crypto coprocessor. Do you think the GPU offload will be worth it when the sytem has hw accelerated crypto?
- tjoff 14y agoThe question should be whether dedicated hardware for accelerated crypto will be worth it when GPU offload is suitable for it. Although in that particular context (security) you might enjoy the isolation of dedicated hardware as opposed to sharing it with others. The GPU solution though of course has the advantage of being able to adapt to new ciphers etc.
- dfc 14y agoAdapting/implementing the newest and hottest cipher on the block is not something that the crypto community advocates. Do you really think crypto accelerated hardware is going to fall behind and not support the ciphers that the crypto community (academia/industry) endorses?
- Hoff 14y agoThat depends on which team you're playing for, no?
- dfc 14y agoI am not trying to be difficult but i have no idea what you are talking about. I looked through your past comments and you seem to be a competent commenter, can you clarify that you meant?
- Hoff 14y agoWhether you are attacking the encryption, or whether you're a user of encryption; a defender. If you're attacking, having flexibility is advantageous.
- tjoff 14y agoI've been waiting for what, a decade, since VIA introduced padlock to get hardware accelerated encryption in mainstream CPUs. And, just recently, basic support have been introduced but only for AES and nothing else (and if I'm not mistaken (probably is) the padlock is vastly superior to the offerings of AMD and intel :P). So yes, crypto accelerated hardware is behind and does not support the ciphers that the crypto community (academia/industry) endorses and in all likelihood will never bother catch up since doing it on the GPU will be good enough. Even if it takes another decade.
- dfc 14y agoWhat algos are you missing? The AES-NI instruction set was proposed in 2008 and the first intel cpus started shipping almost three years ago.[1] Soekris has had the vpnXXXX crypto accelerators since as long as I can remember.[2] [1] http://ark.intel.com/search/advanced/?s=t&AESTech=true http://ark.intel.com/search/advanced/?s=t&AESTech=true [2] http://soekris.com/ http://soekris.com/
- tjoff 14y ago
- Tuna-Fish 14y agoSpecialized, single-purpose hardware is right now some 10x more energy-efficient for the same task than a GPU, (and some 50x more efficient than a CPU). Given that modern chips are not limited by transistor density but by energy density, we're going to see more special-purpose hardware in our chips, not less.
- caf 14y agoNot so much RAID5, which is just an XOR operation that is as good as free on a modern CPU, but RAID6 where a more computation-intensive Reed-Solomon code is used.