Download the Tom's Hardware App from the App Store
The reference for current tech news
Yes No
Signin with

Clarkdale-Based Core i5 With AES Support

by

We've published very comprehensive coverage of Intel’s new dual-core processor family that will tell you everything you need to know about Intel’s latest 32nm processors:

Intel Core i5: Clarkdale Rings the Death Knell of Core 2

Clarkdale’s Efficiency: Core i5-661 Against Core 2, Athlon II, Phenom II

Intel’s Mobile Core i5 and Core i3

The processors not only represent Intel's newest generation of manufacturing technology (32nm as opposed to 45nm), but they’re also the first to include the company's first implementation of a few new instructions to accelerate enctyption. AES New Instructions consist of four instructions for AES encryption (AESENC, AESENCLAST) and decryption (AESDEC, AESDECLAST) plus two more instructions for AES key expansion (AESIMC, AESKEYGENASSIST). These are Single Instruction Multiple Data (SIMD) codes. All three AES key lengths are supported (128-, 192-, and 256-bit with 10, 12, and 14 rounds of substitution and permutation).

All AES intructions have fixed and data-independent latency, meaning that time is fixed, hence not requiring any memory access. In addition, the programming model is the same as in all other SSE instructions from the initial standard up to SSE4. This means that all operating systems that support SSE state handling will be able to use AES-NI.

But be careful when selecting a processor, assuming it includes AES acceleration. Only a few models support the new instructions today. Core i3, based on the Clarkdale 32nm dual-core design, does not support it; the Core i5-600-series does.

The situation is a bit more difficult to comprehend on the mobile side. While mobile Core i3 CPUs again do not support AES acceleration, the Core i5-500 series does. However, the one Core i5-400 model available today also doesn't support AES-NI. Things could be so easy if Intel simply introduced this feature for all models. It looks like AES-NI support will be to the company's Clarkdale-based parts as VT-x was to last-generation's Core 2s.

Share:
39
Comments
X
Submit

Comments
p1n3apqlexpr3ss 02/02/2010 5:33 AM
Hide
-3+

Great article, but still dont really have a idea about this AES stuff, encryption as far as i care, which i dont much really.
Would really love to see a article comparing hyperthreading to the real shiz, i3 530 vs i5 750, at 3ghz each, id love to see how they perform

mjello 02/02/2010 6:11 AM
Hide
-5+

I dont get this for a personal computer... They allready have plenty power to do this.

For a VPN server that would be great.... Hey wait most dont use x86 but hardware specialized for this purpose...

Nice little insignificant feature though

anamaniac 02/02/2010 6:44 AM
Hide
--1+

P1n3apqlExpr3ss :
Great article, but still dont really have a idea about this AES stuff, encryption as far as i care, which i dont much really.Would really love to see a article comparing hyperthreading to the real shiz, i3 530 vs i5 750, at 3ghz each, id love to see how they perform


Yeah, more interested in how useful hyperthreading is on these dual cors too.
All locked at, 3.0GHz, comparing i5-660 vs i5 750 vs any C2Q with a decent amount of cache. More than anything though, just comparing a dual core with HT LGA 1156 vs a C2Q.

cangelini 02/02/2010 8:10 AM
Hide
-8+

Well, I promised that we'd revisit AES-NI in the launch story, so we're keeping our word on that one =) I'll talk to the guys about some deeper insight on HT Ani!

anonymous 02/02/2010 10:42 AM
Hide
-2+

For a user to say they will never have a need for encryption commands on the desktop processor is ridiculous. Life cycles on these processors will be several years, and AES finds its way into more and more software/hardware each day. If you use accounting software, I hope you use encryption. If you have sensitive data on your computer, putting it in an encrypted container is very easy and worthwhile.

Do you have plenty of horsepower with your old core 2 duo? sure. Do you read this site because you buy off the shelf and are satisfied with mediocre performance? I doubt it. What intel is doing is enabling you to have outstanding performance even in an AES encrypted environment.

I'd be interested in seeing benchmarks from cascaded encryption including AES - if you cascade AES and TwoFish, for example, I bet the performance hit is minimal with the on-chip AES support! I know without it, cascaded encryption gives a performance hit that makes you not want to use it...

ajai 02/02/2010 11:25 AM
Hide
-2+

You could have used the Via Nano also just for the fun of things...

Reynod 02/02/2010 11:25 AM
Hide
-2+

Thanks.

Yuka 02/02/2010 11:31 AM
Hide
-1+

It's a very useful NI for corporate mails/attachments... Once they teach people how to USE compression at all, rofl. I can see the use in it at least; could make it a default for some mail clients (cough cough Outlook/Windows Mail/Thunderbird, cough cough).

Hope this develops faster and AMD follows Intel on this one. I'd love to get (at least) close to "real time" encryption on my system for security matters. SSH communications also could get better/faster for servers (yeah sure, why not? XD!)

Great article, BTW!

Cheers!

jeffunit 02/02/2010 11:32 AM
Hide
-0+

You might mention that the application has to be compiled to use the AES-NI instructions or there will be absolutely no benefit from the instructions, as they won't get used.

Of course, if you have the source code, and a compiler that supports the AES-NI instructions it is easy to do it yourself. But few windows programs are open source, so you have to generally rely on the vendor.

ajai 02/02/2010 11:36 AM
Hide
-2+

Scores:

Intel I5 661 3.3Ghz - 2000 MB/s
Via Nano 1.3ghz - 0765 MB/s
Intel I7 870 2.9Ghz - 0710 MB/s
Intel QX9770 3.2Ghz - 0396 MB/s


lol a Via nano @ 1.3Ghz can beat a i7 870 in AES...

martel80 02/02/2010 12:57 PM
Hide
-1+

Quote :The SHA-256 encryption test proves that the feature only accelerates AES.
SHA is just a hash function, it does not encrypt anything.

Mr_Man 02/02/2010 1:55 PM
Hide
-0+

Just a quick question: what do you guys use to make a RAM drive that big? The biggest my RAM drive is allowed to be is 30 MB.

JohnnyLucky 02/02/2010 1:57 PM
Hide
-0+

So what will this do for a little old lady whose idea of gaming is Windows Solitaire?

razor512 02/02/2010 4:23 PM
Hide
--1+

seems good but no one will buy it unless they add that to the core i7 series the casual user doesn't really benefit from this and even many servers wont benefit either, from my experience, one of the main problems faced with servers is CPU and hard drive performance. Most companies do not want SSD for really important tasks as they often show no signs of when they are ready to fail and the read/write cycles that the drives get put through 24/7 will kill a SSD

other than storage, there's a problem with CPU performance. Faster encryption is good but it wont be enough to make someone pick that CPU over a overall faster CPU as encryption isn't a large part of work that people need done, it is just a small and vital part of it.

people who want this kind of acceleration wont care about it much, what people want is a CPU that is as fast as possible and other additional accelerations such as the encryption, is just icing on the cake

TheRev 02/02/2010 5:40 PM
Hide
-3+

I have nearly 400,000 clients running a full disk encryption product. Benchmarks have shown that performance is easily CPU bound and not I/O as many might think. For an enterprise, this will have a huge impact and will be a 'must have' requirement for our next model transiton.

snemarch 02/02/2010 6:28 PM
Hide
-1+

Remember that "time to encrypt " is only one possible benchmark. In a real-life situation, it's equally interesting to look at CPU load while en/decrypting. As an example, my X25-E delivers ~220MB/s read performance, while TrueCrypt benchmark shows it can do ~350MB/s AES-256 on my Q6600@2.4GHz.

In other words, I'm I/O limited and AES-NI wouldn't reduce the wall-clock time spent on en/decryption. However, that 350MB/s encryption bandwidth is at 100% CPU utilization (all 4 cores) - in other words, reading full-speed from my X-25E would be at approximately 63% CPU load.

Clearly, while AES-NI wouldn't get the job done faster, it would free up CPU cycles for other use.

omoronovo 02/02/2010 6:47 PM
Hide
-0+

First thing I thought when reading this is that Toms would use Truecrypt and it's built-in benchmarking tool to help use this as well, I was surprised they didn't.

Since Truecrypt also combines encryption techniques, this would be a good way to see how cascaded algorithms that contain AES are improved with the new instructions.

dertechie 02/02/2010 9:25 PM
Hide
--1+

P1n3apqlExpr3ss :
Great article, but still dont really have a idea about this AES stuff, encryption as far as i care, which i dont much really.Would really love to see a article comparing hyperthreading to the real shiz, i3 530 vs i5 750, at 3ghz each, id love to see how they perform



Anand did pit the processors against each other HERE. They were simulated i3s (underclocked i5-661 with Turbo turned off). No one's done it with the clock speeds locked to X though. However, a Lynnfield at stock turbos to 3.2 GHz for 1/2 threads, which is close enough to a i3 at 3.06.

The basic conclusion is this: the i3s are pretty good. However, when you hit 4 heavy threads, the real quads kick them to the curb.

Fortunately for i3, most games don't have 4 heavy threads, so they work fine there. Unfortunately for them, transcoding does, and they get demolished there.

Yuka :
Hope this develops faster and AMD follows Intel on this one.



It's in Bulldozer (2011), but not Thuban/Zosma. Don't know about Bobcat.

To be honest though, i5-6xx is for the enterprise market. Unless you have a particular need for AES-NI, they're not compelling from a price perspective.

yuhong 02/03/2010 1:12 AM
Hide
--1+

What about PCLMULQDQ, the other new instruction?


Best offers

Newsletters


OK