Does Java use AES-NI when available?

Question

I just heard of the instruction set extension AES-NI. Does Java's JIT compiler compile the application to use AES-NI if it is available to enhance performance?

And if yes, does it also do so if it is not sure that AES will be used (like when using TLS)?

Answer 1

I think it's not bundled with JDK, you have to download and build it yourself

See https://software.intel.com/en-us/articles/intel-aes-ni-performance-testing-on-linuxjava-stack#enable-intel-eas-ni-in-oracle-jvm

Answer 2

Java 8 and 7u40 and later include support for x86 AES intrinsics for the built-in SunJCE provider, but the feature is not enabled by default (it is).

Search globals.hpp for "AES":

product(bool, UseAES, false,                                              \
        "Control whether AES instructions can be used on x86/x64")        \
...
product(bool, UseAESIntrinsics, false,                                    \
        "Use intrinsics for AES versions of crypto")                      \

You can enable the feature by passing the -XX:+UseAES -XX:+UseAESIntrinsics options to the virtual machine.