[openssl-users] OpenSSL version 1.1.1 pre release 3 published

[Dennis Clarke]

On 20/03/18 08:03 PM, Viktor Dukhovni wrote:
> 
> 
>> On Mar 20, 2018, at 5:55 PM, Dennis Clarke <dclarke at blastwave.org> wrote:
>>
>>                   sign    verify    sign/s verify/s
>> rsa 4096 bits 0.082541s 0.001186s     12.1    843.0
> 
> That seems remarkably slow, is that expected with this CPU?
> My laptop (PowerBook pro) is a 12 to 13 times faster:
> 
> Doing 4096 bit private rsa's for 10s: 1566 4096 bit private RSA's in 9.99s
> Doing 4096 bit public rsa's for 10s: 102768 4096 bit public RSA's in 9.99s
> OpenSSL 1.1.1-pre4-dev  xx XXX xxxx
> built on: Tue Mar 20 22:07:47 2018 UTC
> options:bn(64,64) rc4(16x,int) des(int) aes(partial) idea(int) blowfish(ptr)
> compiler: cc -fPIC -arch x86_64 -Qunused-arguments -O3 -Wall -DL_ENDIAN -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -D_REENTRANT -DNDEBUG
>                   sign    verify    sign/s verify/s
> rsa 4096 bits 0.006379s 0.000097s    156.8  10287.1
> 

You want to see slow ?  Let me show you slow :

root at phobos:~# uname -r
4.15.9-genunix
root at phobos:~# cat /etc/debian_version
buster/sid

root at phobos:~# /usr/bin/openssl version
OpenSSL 1.1.0g  2 Nov 2017

root at phobos:~# /usr/bin/openssl speed rsa4096
Doing 4096 bit private rsa's for 10s: 12 4096 bit private RSA's in 10.74s
Doing 4096 bit public rsa's for 10s: 765 4096 bit public RSA's in 10.00s
OpenSSL 1.1.0g  2 Nov 2017
built on: reproducible build, date unspecified
options:bn(64,32) rc4(4x,int) des(long) aes(partial) blowfish(ptr)
compiler: gcc -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_THREADS 
-DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_BN_ASM_PART_WORDS 
-DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_GF2m 
-DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DRMD160_ASM 
-DAES_ASM -DVPAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM -DECP_NISTZ256_ASM 
-DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSLDIR="\"/usr/lib/ssl\"" 
-DENGINESDIR="\"/usr/lib/i386-linux-gnu/engines-1.1\""
                   sign    verify    sign/s verify/s
rsa 4096 bits 0.895000s 0.013072s      1.1     76.5


Now that is slow.

However I have a sparc unit that reports "inf" or infinite speed so one
  never really knows what one will get.

Dennis