From f5b6b0448fcb97d366fe14577226fd8c972e41d1 Mon Sep 17 00:00:00 2001
From: rpm-build <rpm-build>
Date: Tue, 13 Aug 2024 19:22:16 +0800
Subject: [PATCH 1/2] turbo: enable support for QAT engine

set QAT engin as deafult engine, make sure openssl run in x86_64
which support AVX512F, VAES, VPCLMULQDQ

test on GENUINE INTEL(R) XEON(R)  CPU @ 2.6GHz:

$ openssl speed -async_jobs 8 -multi ${CPU_NUM} -seconds 30 rsa4096

| RSA         | Before Optimization | After Optimization | Improvement |
|-------------|---------------------|--------------------|-------------|
| sign/s      | 24303.7             | 85495.7            | 251.78%     |
| verify/s    | 1563816.8           | 4561658.8          | 191.70%     |

Signed-off-by: Shuo Wang <abushwang@tencent.com>
---
 apps/openssl.cnf | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/apps/openssl.cnf b/apps/openssl.cnf
index f489f19..6bda5b8 100644
--- a/apps/openssl.cnf
+++ b/apps/openssl.cnf
@@ -46,6 +46,7 @@ tsa_policy3 = 1.2.3.4.5.7
 providers = provider_sect
 # Load default TLS policy configuration
 ssl_conf = ssl_module
+engines = engine_section
 
 # Uncomment the sections that start with ## below to enable the legacy provider.
 # Loading the legacy provider enables support for the following algorithms:
@@ -56,6 +57,13 @@ ssl_conf = ssl_module
 # security critical operations, as they are cryptographically weak or vulnerable
 # to side-channel attacks and as such have been deprecated.
 
+[engine_section]
+qatengine = qatengine_section
+
+[qatengine_section]
+engine_id = qatengine
+default_algorithms = ALL
+
 [provider_sect]
 default = default_sect
 ##legacy = legacy_sect
-- 
2.39.3