[openssl-users] OpenSSL performance issue

[Michael Wojcik]

> From: openssl-users [mailto:openssl-users-bounces at openssl.org] On Behalf
> Of Kurt Roeckx
> Sent: Thursday, December 18, 2014 16:36
> To: openssl-users at openssl.org
> Subject: Re: [openssl-users] OpenSSL performance issue
> 
> So the differnce here is that jave picks a DHE ciphersuite while otherwise you
> didn't.  DHE gives you forward secrecy but is slower.

And if DH parameters have not been set, OpenSSL will have to generate them on the fly, which can be *very* slow (relative to normal conversation establishment).

The OP might benefit from reading

https://wiki.openssl.org/index.php/Diffie_Hellman
https://wiki.openssl.org/index.php/Diffie-Hellman_parameters

-- 
Michael Wojcik
Technology Specialist, Micro Focus



This message has been scanned for malware by Websense. www.websense.com