[zorp-hu] ssh, https

[Sandor Geller]

On Thu, 2005-08-11 at 16:01 +0200, Balazs Scheidler wrote:

> ez milyen openssl, milyen gcc-vel forditva? esetleg disztro? nalam
> nagyjabol negyedennyi jon ki (PIV 3GHz, openssl 0.9.7e, Debian sarge):
> 
>                   sign    verify    sign/s verify/s
> rsa  512 bits   0.0008s   0.0001s   1314.0  14458.4
> rsa 1024 bits   0.0038s   0.0002s    262.1   4719.6
> rsa 2048 bits   0.0232s   0.0007s     43.1   1417.8
> rsa 4096 bits   0.1592s   0.0025s      6.3    405.3
> 
> Ekkora kulonbseget nem indokol az orajel kulonbseg, bar a cache meret szamithat.

Hazon belul mar volt errol szo, a kulonbseg nagyreszt abbol adodik
(szerintem), hogy az openssl a 0.9.7f-tol kezdodoen jobban van
optimalizalva. A debian sarge sajna 0.9.7e-vel kerult kiadasra...
Ugyanazon a gepen, ugyanazzal a gcc-vel forditott OpenSSL 0.9.8 (ZorpOS
3.1) vs OpenSSL 0.9.7e (debian sarge):

hapci:/# openssl speed rsa
Doing 512 bit private rsa's for 10s: 11367 512 bit private RSA's in
10.00s
Doing 512 bit public rsa's for 10s: 146747 512 bit public RSA's in
10.00s
Doing 1024 bit private rsa's for 10s: 2603 1024 bit private RSA's in
9.99s
Doing 1024 bit public rsa's for 10s: 56380 1024 bit public RSA's in
9.99s
Doing 2048 bit private rsa's for 10s: 486 2048 bit private RSA's in
10.01s
Doing 2048 bit public rsa's for 10s: 19234 2048 bit public RSA's in
10.00s
Doing 4096 bit private rsa's for 10s: 82 4096 bit private RSA's in
10.10s
Doing 4096 bit public rsa's for 10s: 5704 4096 bit public RSA's in
10.00s
OpenSSL 0.9.8 05 Jul 2005
built on: Thu Jul 14 11:42:27 CEST 2005
options:bn(64,32) md2(int) rc4(idx,int) des(ptr,risc1,16,long)
aes(partial) blowfish(idx) 
compiler: gcc -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT
-DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTERMIO -O3 -march=i686
-mcpu=i686 -fomit-frame-pointer -Wall -DOPENSSL_BN_ASM_PART_WORDS
-DOPENSSL_IA32_SSE2 -DSHA1_ASM -DMD5_ASM -DRMD160_ASM -DAES_ASM
available timing options: TIMES TIMEB HZ=100 [sysconf value]
timing function used: times
                  sign    verify    sign/s verify/s
rsa  512 bits 0.000880s 0.000068s   1136.7  14674.7
rsa 1024 bits 0.003838s 0.000177s    260.6   5643.6
rsa 2048 bits 0.020597s 0.000520s     48.6   1923.4
rsa 4096 bits 0.123171s 0.001753s      8.1    570.4

hapci:~# openssl speed rsa
Doing 512 bit private rsa's for 10s: 10938 512 bit private RSA's in
9.99s
Doing 512 bit public rsa's for 10s: 104334 512 bit public RSA's in 8.41s
Doing 1024 bit private rsa's for 10s: 1311 1024 bit private RSA's in
5.96s
Doing 1024 bit public rsa's for 10s: 39929 1024 bit public RSA's in
10.00s
Doing 2048 bit private rsa's for 10s: 346 2048 bit private RSA's in
9.50s
Doing 2048 bit public rsa's for 10s: 11491 2048 bit public RSA's in
9.50s
Doing 4096 bit private rsa's for 10s: 54 4096 bit private RSA's in
10.11s
Doing 4096 bit public rsa's for 10s: 3418 4096 bit public RSA's in
10.00s
OpenSSL 0.9.7e 25 Oct 2004
built on: Fri Dec 17 08:45:11 UTC 2004
options:bn(64,32) md2(int) rc4(idx,int) des(ptr,risc1,16,long)
aes(partial) blowfish(idx) 
compiler: gcc -fPIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN
-DHAVE_DLFCN_H -DOPENSSL_NO_KRB5 -DOPENSSL_NO_IDEA -DOPENSSL_NO_MDC2
-DOPENSSL_NO_RC5 -DL_ENDIAN -DTERMIO -O3 -march=i686 -mcpu=i686
-fomit-frame-pointer -Wall -DSHA1_ASM -DMD5_ASM -DRMD160_ASM
available timing options: TIMES TIMEB HZ=100 [sysconf value]
timing function used: times
                  sign    verify    sign/s verify/s
rsa  512 bits   0.0009s   0.0001s   1094.9  12405.9
rsa 1024 bits   0.0045s   0.0003s    220.0   3992.9
rsa 2048 bits   0.0275s   0.0008s     36.4   1209.6
rsa 4096 bits   0.1872s   0.0029s      5.3    341.8

Mindez egy Intel(R) Pentium(R) 4 CPU 2.53GHz procin, terhelt rendszeren.

-- 
Geller Sandor
wildy at balabit.hu