OpenSSL version 1.1.1 pre release 3 published

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
5 messages Options
Reply | Threaded
Open this post in threaded view
|

OpenSSL version 1.1.1 pre release 3 published

openssl
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256


   OpenSSL version 1.1.1 pre release 3 (beta)
   ===========================================

   OpenSSL - The Open Source toolkit for SSL/TLS
   https://www.openssl.org/

   OpenSSL 1.1.1 is currently in beta. OpenSSL 1.1.1 pre release 3 has now
   been made available. For details of changes and known issues see the
   release notes at:

        https://www.openssl.org/news/openssl-1.1.1-notes.html

   Note: This OpenSSL pre-release has been provided for testing ONLY.
   It should NOT be used for security critical purposes.

   The beta release is available for download via HTTP and FTP from the
   following master locations (you can find the various FTP mirrors under
   https://www.openssl.org/source/mirror.html):

     * https://www.openssl.org/source/
     * ftp://ftp.openssl.org/source/

   The distribution file name is:

    o openssl-1.1.1-pre3.tar.gz
      Size: 6552052
      SHA1 checksum: a9dee6b70334726420f483c496216d2b335a4510
      SHA256 checksum: b541d574d8d099b0bc74ebc8174cec1dc9f426d8901d04be7874046ad72116b0

   The checksums were calculated using the following commands:

    openssl sha1 openssl-1.1.1-pre3.tar.gz
    openssl sha256 openssl-1.1.1-pre3.tar.gz

   Please download and check this beta release as soon as possible.
   To report a bug, open an issue on GitHub:

    https://github.com/openssl/openssl/issues

   Please check the release notes and mailing lists to avoid duplicate
   reports of known issues. (Of course, the source is also available
   on GitHub.)

   Yours,

   The OpenSSL Project Team.

-----BEGIN PGP SIGNATURE-----

iQEcBAEBCAAGBQJasQkhAAoJENnE0m0OYESRf30H/1OxOdWi82Cw69+z4ly80TyR
IeWQRgFh60lar3li3R6/ns57eXFo7jGOAAws1iOZll3RGR9bkp70cLXCZtMvZoEP
79pLrfUZR6s6BwGrSs7X3fHac4muUZSQLaAdCJG5Y6Sgi2XBy0rRYFxle0qND1c3
tNeh1B6oXy236cvVaDAUNYKEC/31RzupWIdLdT9UYWLU5qYdgkaOztHO2x1pDRX/
Vs18qNND5mHIrsv0QfZPP40nvsZrRoz7rXBuZdaQwLA9ZJzS0hNxwlpkodJB8kHD
o29Q0fkczGnL3hw5rSi7c+qKgngXIVkB0ssisZBHgHVAA6WvvSPNG9SeGYJRgwQ=
=0UFn
-----END PGP SIGNATURE-----
--
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
Reply | Threaded
Open this post in threaded view
|

Re: OpenSSL version 1.1.1 pre release 3 published

Dennis Clarke-2
On 20/03/18 10:09 AM, OpenSSL wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
>
>     OpenSSL version 1.1.1 pre release 3 (beta)
>     ===========================================
>
>     OpenSSL - The Open Source toolkit for SSL/TLS
>     https://www.openssl.org/
>
>     OpenSSL 1.1.1 is currently in beta. OpenSSL 1.1.1 pre release 3 has now
>     been made available. For details of changes and known issues see the
>     release notes at:

Builds and tests clean on Solaris 10 sparc with Oracle Studio 12.6
compilers and as a 64-bit build.  However one must have a recent and
decent perl on hand.  Also this was a debug build and a I did tweak the
cflags in Configurations/10-main.conf slightly.


n0$ /usr/local/bin/perl ./Configure solaris64-sparcv9-cc

.
.
.
All tests successful.
Files=146, Tests=1335, 341 wallclock secs ( 7.37 usr  0.94 sys + 243.40
cusr 27.79 csys = 279.50 CPU)
Result: PASS
gmake[1]: Leaving directory
`/usr/local/build/openssl-1.1.1-pre3_SunOS5.10_sparcv9.001'

n0$ uname -a
SunOS node000 5.10 Generic_150400-59 sun4u sparc SUNW,SPARC-Enterprise

n0$ psrinfo -pv
The physical processor has 8 virtual processors (0-7)
   SPARC64-VII+ (portid 1024 impl 0x7 ver 0xa1 clock 2860 MHz)

n0$ cc -V
cc: Studio 12.6 Sun C 5.15 SunOS_sparc 2017/05/30

Resultant binary is faster than the Oracle provided bins for a few
things and that is a surprise :

n0$ /usr/bin/sparcv9/openssl version
OpenSSL 1.0.2n  7 Dec 2017

n0$ /usr/bin/sparcv9/openssl speed rsa4096
Doing 4096 bit private rsa's for 10s: 86 4096 bit private RSA's in 10.06s
Doing 4096 bit public rsa's for 10s: 5898 4096 bit public RSA's in 10.00s
OpenSSL 1.0.2n  7 Dec 2017
built on: date not available
options:bn(64,32) md2(int) rc4(ptr,int) des(ptr,risc1,16,int)
aes(partial) blowfish(ptr)
compiler: information not available
                   sign    verify    sign/s verify/s
rsa 4096 bits 0.116977s 0.001695s      8.5    589.8


However this big fat debug binary for 1.1.1-pre3 :

n0$
n0$ LD_LIBRARY_PATH=`pwd` ./apps/openssl version
OpenSSL 1.1.1-pre3 (beta) 20 Mar 2018

n0$ LD_LIBRARY_PATH=`pwd` ./apps/openssl speed rsa4096
Doing 4096 bit private rsa's for 10s: 122 4096 bit private RSA's in 10.07s
Doing 4096 bit public rsa's for 10s: 8422 4096 bit public RSA's in 9.99s
OpenSSL 1.1.1-pre3 (beta) 20 Mar 2018
built on: Tue Mar 20 21:08:33 2018 UTC
options:bn(64,32) rc4(char) des(int) aes(partial) idea(int) blowfish(ptr)
compiler: /opt/developerstudio12.6/bin/cc -KPIC -g -xs -errfmt=error
-erroff=%none -errshort=full -xstrconst -xildoff -m64 -xmemalign=8s
-xnolibmil -Xa -xcode=pic32 -xregs=no%appl -xlibmieee -mc -ftrap=%none
-Qy -xbuiltin=%none -xdebugformat=dwarf -xunroll=1 -xarch=sparc
-D_TS_ERRNO -D_POSIX_PTHREAD_SEMANTICS -D_LARGEFILE64_SOURCE -xstrconst
-Xa -fast -errfmt=error -erroff=%none -errshort=full -xstrconst -xildoff
-m64 -xmemalign=8s -xnolibmil -Xa -xcode=pic32 -xregs=no%appl -xlibmieee
-mc -ftrap=%none -Qy -xbuiltin=%none -xdebugformat=dwarf -xunroll=1
-xarch=sparc -D_TS_ERRNO -D_POSIX_PTHREAD_SEMANTICS
-D_LARGEFILE64_SOURCE -DFILIO_H -DB_ENDIAN -DBN_DIV2W -DDSO_DLFCN
-DHAVE_DLFCN_H -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT
-DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM
-DAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPOLY1305_ASM -D_REENTRANT
-DNDEBUG -I/usr/local/include -D_POSIX_PTHREAD_SEMANTICS
-D_LARGEFILE64_SOURCE -D_TS_ERRNO
                   sign    verify    sign/s verify/s
rsa 4096 bits 0.082541s 0.001186s     12.1    843.0
n0$

neato.


Dennis

--
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
Reply | Threaded
Open this post in threaded view
|

Re: OpenSSL version 1.1.1 pre release 3 published

Viktor Dukhovni


> On Mar 20, 2018, at 5:55 PM, Dennis Clarke <[hidden email]> wrote:
>
>                  sign    verify    sign/s verify/s
> rsa 4096 bits 0.082541s 0.001186s     12.1    843.0

That seems remarkably slow, is that expected with this CPU?
My laptop (PowerBook pro) is a 12 to 13 times faster:

Doing 4096 bit private rsa's for 10s: 1566 4096 bit private RSA's in 9.99s
Doing 4096 bit public rsa's for 10s: 102768 4096 bit public RSA's in 9.99s
OpenSSL 1.1.1-pre4-dev  xx XXX xxxx
built on: Tue Mar 20 22:07:47 2018 UTC
options:bn(64,64) rc4(16x,int) des(int) aes(partial) idea(int) blowfish(ptr)
compiler: cc -fPIC -arch x86_64 -Qunused-arguments -O3 -Wall -DL_ENDIAN -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -D_REENTRANT -DNDEBUG
                 sign    verify    sign/s verify/s
rsa 4096 bits 0.006379s 0.000097s    156.8  10287.1

--
        Viktor.



--
        Viktor.

--
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
Reply | Threaded
Open this post in threaded view
|

Re: OpenSSL version 1.1.1 pre release 3 published

Dennis Clarke-2
On 20/03/18 08:03 PM, Viktor Dukhovni wrote:

>
>
>> On Mar 20, 2018, at 5:55 PM, Dennis Clarke <[hidden email]> wrote:
>>
>>                   sign    verify    sign/s verify/s
>> rsa 4096 bits 0.082541s 0.001186s     12.1    843.0
>
> That seems remarkably slow, is that expected with this CPU?
> My laptop (PowerBook pro) is a 12 to 13 times faster:
>
> Doing 4096 bit private rsa's for 10s: 1566 4096 bit private RSA's in 9.99s
> Doing 4096 bit public rsa's for 10s: 102768 4096 bit public RSA's in 9.99s
> OpenSSL 1.1.1-pre4-dev  xx XXX xxxx
> built on: Tue Mar 20 22:07:47 2018 UTC
> options:bn(64,64) rc4(16x,int) des(int) aes(partial) idea(int) blowfish(ptr)
> compiler: cc -fPIC -arch x86_64 -Qunused-arguments -O3 -Wall -DL_ENDIAN -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -D_REENTRANT -DNDEBUG
>                   sign    verify    sign/s verify/s
> rsa 4096 bits 0.006379s 0.000097s    156.8  10287.1
>

You want to see slow ?  Let me show you slow :

root@phobos:~# uname -r
4.15.9-genunix
root@phobos:~# cat /etc/debian_version
buster/sid

root@phobos:~# /usr/bin/openssl version
OpenSSL 1.1.0g  2 Nov 2017

root@phobos:~# /usr/bin/openssl speed rsa4096
Doing 4096 bit private rsa's for 10s: 12 4096 bit private RSA's in 10.74s
Doing 4096 bit public rsa's for 10s: 765 4096 bit public RSA's in 10.00s
OpenSSL 1.1.0g  2 Nov 2017
built on: reproducible build, date unspecified
options:bn(64,32) rc4(4x,int) des(long) aes(partial) blowfish(ptr)
compiler: gcc -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_THREADS
-DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_BN_ASM_PART_WORDS
-DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_GF2m
-DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DRMD160_ASM
-DAES_ASM -DVPAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM -DECP_NISTZ256_ASM
-DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSLDIR="\"/usr/lib/ssl\""
-DENGINESDIR="\"/usr/lib/i386-linux-gnu/engines-1.1\""
                   sign    verify    sign/s verify/s
rsa 4096 bits 0.895000s 0.013072s      1.1     76.5


Now that is slow.

However I have a sparc unit that reports "inf" or infinite speed so one
  never really knows what one will get.

Dennis
--
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
Reply | Threaded
Open this post in threaded view
|

Re: OpenSSL version 1.1.1 pre release 3 published

Dennis Clarke-2
In reply to this post by Viktor Dukhovni
On 20/03/18 08:03 PM, Viktor Dukhovni wrote:
>
>
>> On Mar 20, 2018, at 5:55 PM, Dennis Clarke <[hidden email]> wrote:
>>
>>                   sign    verify    sign/s verify/s
>> rsa 4096 bits 0.082541s 0.001186s     12.1    843.0
>
> That seems remarkably slow, is that expected with this CPU?

I find it interesting that nearly every version of OpenSSL for the past
  five years will report "inf" performance on one of my sparc units :


$ /usr/local/bin/openssl version
OpenSSL 1.1.0g  2 Nov 2017

$ /usr/local/bin/openssl speed rsa1024
Doing 1024 bit private rsa's for 10s: 28 1024 bit private RSA's in 0.00s
Doing 1024 bit public rsa's for 10s: 1964 1024 bit public RSA's in 0.00s
OpenSSL 1.1.0g  2 Nov 2017
built on: reproducible build, date unspecified
options:bn(64,32) rc4(char) des(int) aes(partial) idea(int) blowfish(ptr)
compiler: /opt/solarisstudio12.4/bin/cc -DDSO_DLFCN -DHAVE_DLFCN_H
-DNDEBUG -DOPENSSL_THREADS -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC
-DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM
-DSHA512_ASM -DMD5_ASM -DAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM
-DPOLY1305_ASM -DOPENSSLDIR="\"/usr/local/ssl\""
-DENGINESDIR="\"/usr/local/lib/engines-1.1\""
                   sign    verify    sign/s verify/s
rsa 1024 bits 0.000000s 0.000000s      Inf      Inf
$

I always find that interesting.

Dennis

--
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users