Mail archive
alpine-user

Re: [alpine-user] OpenSSL Padlock patch

From: Tamas Szabo <alpine-mailinglist_at_szatam.com>
Date: Wed, 27 Feb 2019 17:55:03 +0000

Hey Vincent, There's development upfront. The old patches are not needed anymore but the padlock build was broken in 1.1. It seems OpenSSL 1.1.1c will work properly, the issue recently got fixed: https://github.com/openssl/openssl/commit/e8926acfe25418d029656d4abb321096a2cf17c5 Here's the output of a fresh OpenSSL build on one of my VIA Eden machines running Alpine: Without padlock: ---------------- OpenSSL 1.1.1c-dev xx XXX xxxx built on: Wed Feb 27 17:17:48 2019 UTC options:bn(64,64) rc4(8x,int) des(int) aes(partial) blowfish(ptr) compiler: gcc -fPIC -pthread -m64 -Wa,--noexecstack -Wall -O3 -Os -fomit-frame-pointer -Os -fomit-frame-pointer -g -Wa,--noexecstack -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DKECCAK1600_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPOLY1305_ASM -DNDEBUG The 'numbers' are in 1000s of bytes per second processed. type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes 16384 bytes aes-128-cbc 34223.97k 40745.30k 42470.49k 43441.20k 43439.82k 43533.84k With padlock: ------------- OpenSSL 1.1.1c-dev xx XXX xxxx built on: Wed Feb 27 17:17:48 2019 UTC options:bn(64,64) rc4(8x,int) des(int) aes(partial) blowfish(ptr) compiler: gcc -fPIC -pthread -m64 -Wa,--noexecstack -Wall -O3 -Os -fomit-frame-pointer -Os -fomit-frame-pointer -g -Wa,--noexecstack -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DKECCAK1600_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPOLY1305_ASM -DNDEBUG The 'numbers' are in 1000s of bytes per second processed. type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes 16384 bytes aes-128-cbc 47937.93k 157795.98k 350032.86k 500437.07k 573614.36k 580679.96k -- SZABO Tamas DevOps Consultant --------------------- https://tamasszabo.net Fingerprint: C618489DEAF36810ACD781ED7C74C9236CDBB4E6 February 27, 2019 7:47 PM, "Vincent Bentley" <vince_at_vincentbentley.co.uk> wrote: > Thanks Natanael. I completely forgot that the patches will be captured in the git history, doh! > > On 29/01/2019 19:10, Natanael Copa wrote: > >> They are available in the git history: >> https://git.alpinelinux.org/aports/tree/main/openssl?id=49effa784421467508e5906d4e037c39d311929f >> -nc > > --- > Unsubscribe: alpine-user+unsubscribe@lists.alpinelinux.org > Help: alpine-user+help@lists.alpinelinux.org > ---


---
Unsubscribe:  alpine-user+unsubscribe_at_lists.alpinelinux.org
Help:         alpine-user+help_at_lists.alpinelinux.org
---
Received on Wed Feb 27 2019 - 17:55:03 UTC