LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices


Reply
  Search this Thread
Old 06-10-2014, 09:44 PM   #1
cwizardone
LQ Guru
 
Registered: Feb 2007
Distribution: Slackware64-current with "True Multilib."
Posts: 5,763
Blog Entries: 1

Rep: Reputation: 3105Reputation: 3105Reputation: 3105Reputation: 3105Reputation: 3105Reputation: 3105Reputation: 3105Reputation: 3105Reputation: 3105Reputation: 3105Reputation: 3105
Tor and openSSL.


I was looking at the message log in the Vidalia control panel and noticed this,

Quote:
We were built to run on a 64-bit CPU with openSSL 1.0.1 or later, but with a version of openSSL that apparently lacks accelerated support of NIST P-224 and P-256 groups. Building openssl with such support (using the enable-ec_nistp_64_gcc_128 option when configuring it) would make ECDH much faster.
The above is not worded very well, so I'm not sure what exactly it is saying, but let me take a guess. Is it saying, that the -current version of openSSL lacks support for "NIST P-224 and P-256 groups," and if openSSL were to be rebuilt with "ec_nistp_64_gcc_128" enabled, it would perform better, that is, faster?

Thanks.

Last edited by cwizardone; 06-10-2014 at 09:48 PM.
 
Old 06-10-2014, 10:00 PM   #2
orasis
Member
 
Registered: Mar 2008
Distribution: Slackware, Free-BSD
Posts: 53

Rep: Reputation: 34
The difference would be imperceptible to a human. Leave it alone.
 
1 members found this post helpful.
Old 06-10-2014, 10:52 PM   #3
mancha
Member
 
Registered: Aug 2012
Posts: 484

Rep: Reputation: Disabled
Hi.

On a 64-bit system, enabling the OpenSSL NIST 64-bit optimization should result in considerable speed improvements when using
curves: NIST-P224, NIST-P256, and NIST-P521.

You can test this by running the following with and without 64-bit optimization:

Code:
$ openssl speed ecdsap224
On a test system, I get a 60% increase in signings/second and about 190% increase in verifications/second. An additional benefit
is that the 64-bit optimized code uses constant-time multiplications thereby making it more resistant to timing attacks.

I've not sent Pat an email suggesting he adopt this for Slackware64 but I did endorse its usage in another LQ thread.

The change is simple. Get the official Slackware64 build files and edit openssl.SlackBuild by adding the line in red:
Code:
./config \
 --prefix=/usr \
 --openssldir=/etc/ssl \
 enable-ec_nistp_64_gcc_128 \
 no-idea \
 no-rc5 \
 no-sse2 \
 shared
--mancha

Last edited by mancha; 06-10-2014 at 10:59 PM.
 
4 members found this post helpful.
Old 06-10-2014, 11:41 PM   #4
cwizardone
LQ Guru
 
Registered: Feb 2007
Distribution: Slackware64-current with "True Multilib."
Posts: 5,763

Original Poster
Blog Entries: 1

Rep: Reputation: 3105Reputation: 3105Reputation: 3105Reputation: 3105Reputation: 3105Reputation: 3105Reputation: 3105Reputation: 3105Reputation: 3105Reputation: 3105Reputation: 3105
@mancha,
Thank you very much!
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: How To Set Up A TOR Middlebox Routing All VirtualBox Virtual Machine Traffic Over The TOR Netw LXer Syndicated Linux News 0 02-08-2012 11:30 AM
install of openssl-0.9.8b-8.3.el5 conflicts with file from package openssl-0.9.8b-8.3 jsaravana87 Linux - Server 1 09-26-2011 01:02 PM
LXer: Tor Browser Bundle-Tor Goes Portable LXer Syndicated Linux News 1 09-02-2011 02:29 AM
TOR: traffic between my workstation TOR entry point really not encrypted..? john99 Incognito 3 11-11-2009 01:06 AM
oops openssl-0.9.8e over openssl-0.9.8d bad install now 2 copies? rcorkum Slackware 4 06-29-2007 01:58 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware

All times are GMT -5. The time now is 05:29 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration