No need to use --engine cryptodev in config as OpenSSL version 1.0.0 and up will use it automatically when available.

<code bash>
openssl speed aes-128-cbc
openssl speed -evp aes-128-cbc

openssl speed -evp aes-256-cbc
# With NI disabled
OPENSSL_ia32cap=0 openssl speed -evp aes-256-cbc


ls -l /usr/lib/engines-1.1/
total 68
-rwxr-xr-x    1 root     root         22768 Dec 26 13:56 afalg.so
-rwxr-xr-x    1 root     root         13856 Dec 26 13:56 capi.so
-rwxr-xr-x    1 root     root         26512 Dec 26 13:56 padlock.so
</code>

AF_ALG plugin for OpenSSL 7 takes advantage of the new AF_ALG interface present in kernels since 2.6.38.

<code bash>
openssl speed -evp aes-128-cbc -engine afalg
openssl speed -evp aes-128-cbc
</code>