Mail archive
alpine-user

Re: [alpine-user] OpenSSL Padlock patch

From: Vincent Bentley <vince_at_vincentbentley.co.uk>
Date: Wed, 27 Feb 2019 19:27:29 +0000

That is very good news, thanks.

On 27/02/2019 17:55, Tamas Szabo wrote:
> Hey Vincent,
>
> There's development upfront. The old patches are not needed anymore but the padlock build was broken in 1.1. It seems OpenSSL 1.1.1c will work properly, the issue recently got fixed:
>
> https://github.com/openssl/openssl/commit/e8926acfe25418d029656d4abb321096a2cf17c5
>
> Here's the output of a fresh OpenSSL build on one of my VIA Eden machines running Alpine:
>
> Without padlock:
> ----------------
> OpenSSL 1.1.1c-dev xx XXX xxxx
>
> built on: Wed Feb 27 17:17:48 2019 UTC
> options:bn(64,64) rc4(8x,int) des(int) aes(partial) blowfish(ptr)
> compiler: gcc -fPIC -pthread -m64 -Wa,--noexecstack -Wall -O3 -Os -fomit-frame-pointer -Os -fomit-frame-pointer -g -Wa,--noexecstack -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DKECCAK1600_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPOLY1305_ASM -DNDEBUG
> The 'numbers' are in 1000s of bytes per second processed.
> type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes 16384 bytes
> aes-128-cbc 34223.97k 40745.30k 42470.49k 43441.20k 43439.82k 43533.84k
>
>
> With padlock:
> -------------
> OpenSSL 1.1.1c-dev xx XXX xxxx
> built on: Wed Feb 27 17:17:48 2019 UTC
> options:bn(64,64) rc4(8x,int) des(int) aes(partial) blowfish(ptr)
> compiler: gcc -fPIC -pthread -m64 -Wa,--noexecstack -Wall -O3 -Os -fomit-frame-pointer -Os -fomit-frame-pointer -g -Wa,--noexecstack -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DKECCAK1600_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPOLY1305_ASM -DNDEBUG
> The 'numbers' are in 1000s of bytes per second processed.
> type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes 16384 bytes
> aes-128-cbc 47937.93k 157795.98k 350032.86k 500437.07k 573614.36k 580679.96k
>
>
> --
> SZABO Tamas
> DevOps Consultant
> ---------------------
> https://tamasszabo.net
> Fingerprint: C618489DEAF36810ACD781ED7C74C9236CDBB4E6
>
> February 27, 2019 7:47 PM, "Vincent Bentley" <vince_at_vincentbentley.co.uk> wrote:
>
>> Thanks Natanael. I completely forgot that the patches will be captured in the git history, doh!
>>
>> On 29/01/2019 19:10, Natanael Copa wrote:
>>
>>> They are available in the git history:
>>> https://git.alpinelinux.org/aports/tree/main/openssl?id=49effa784421467508e5906d4e037c39d311929f
>>> -nc
>>
>> ---
>> Unsubscribe: alpine-user+unsubscribe_at_lists.alpinelinux.org
>> Help: alpine-user+help_at_lists.alpinelinux.org
>> ---
>
>
> ---
> Unsubscribe: alpine-user+unsubscribe_at_lists.alpinelinux.org
> Help: alpine-user+help_at_lists.alpinelinux.org
> ---
>


---
Unsubscribe:  alpine-user+unsubscribe_at_lists.alpinelinux.org
Help:         alpine-user+help_at_lists.alpinelinux.org
---
Received on Wed Feb 27 2019 - 19:27:29 UTC