Re: openssl speed

["Steven M. Bellovin" <smb%cs.columbia.edu@localhost>]

On Fri, 18 Jan 2008 01:12:56 +0100
comfooc <comfooc%gmail.com@localhost> wrote:

> On Jan 18, 2008 12:59 AM, Tobias Nygren <tnn%netbsd.org@localhost> wrote:
> > Here's a comparison of openssl in base versus openssl in pkgsrc.
> > (hmm, is the one in base built with -DAES_ASM?)
> 
> OpenSSL was out of the box.
> 
> Nice improvement:
> > aes-128 cbc      19817.54k    32046.81k    35250.21k
> > 34628.52k    34475.44k aes-128 cbc      29900.87k    63051.02k
> > 75165.91k    74338.22k    78229.52k
> 
> So shouldn't it be added some performance boosting options to base
> openssl build?
> If not, why?
> 
NetBSD has decided -- probably correctly -- that Perl should not be
part of the base system.  OpenSSL is, and if it can't be built in
some mode without Perl the base system has to do without that option.
The question is what we can or should do about it in this case.


                --Steve Bellovin, http://www.cs.columbia.edu/~smb