[openssl-users] RSA Key generation time

Mithun P getmithunp at gmail.com
Mon Jan 23 07:09:00 UTC 2017


Hi Jakob,

Can you please give me some reference/example of bignum optimization which
I can check on powerpc architectures.
Is this any specific instruction set addition? or something more generic?

Thanks & Regards
Mithun

On Tue, Jan 17, 2017 at 9:38 PM, Jakob Bohm <jb-openssl at wisemo.com> wrote:

> On 17/01/2017 07:44, Mithun P wrote:
>
>> Hi
>>
>> I have a embedded board P1010 RDB  running openssl on VXWORKS 5.4 .
>> I am generating RSA 2048 and 3072 bit key pairs.
>> I am providing entropy to openssl by using RAND_seed from a HW RNG.
>>
>> My average generation time for RSA 2048 key pair is 2 Minutes and  3072
>> is 8 minutes.
>> Is there a way to reduce the generation time?
>>
>> I believe this is a CPU intensive operation (if VxWorks can do
> this, try observing the CPU load during).
>
> Potential improvements:
>
> 1. Check if the CPU specific bignum optimizations for your CPU
>   variant have been enabled via the libcrypto CPU detection code
>   (for example, there are optimizations for different ARM cortex
>   variants).
> 2. Faster CPU (expensive obviously).
> 3. Do the generation in the background before the keypair is
>   needed, at a time when the extra CPU load is less of a problem.
>
>
> Enjoy
>
> Jakob
> --
> Jakob Bohm, CIO, Partner, WiseMo A/S.  https://www.wisemo.com
> Transformervej 29, 2860 Søborg, Denmark.  Direct +45 31 13 16 10
> This public discussion message is non-binding and may contain errors.
> WiseMo - Remote Service Management for PCs, Phones and Embedded
>
> --
> openssl-users mailing list
> To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20170123/466e3d59/attachment.html>


More information about the openssl-users mailing list