2012-06-27 18:18:46 |
cc |
bug |
|
|
added bug |
2012-06-27 18:20:17 |
cc |
description |
This is to turn on the code contributed by Google for optimized 64bit implementations of elliptic curves.
From the OpenSSL changelog,
Specify "enable-ec_nistp_64_gcc_128" on the Configure (or config) command
line to include this in your build of OpenSSL, and run "make depend" (or
"make update"). This enables the following EC_METHODs:
So it really is as simple as enabling an additional compile flag. |
This is to turn on the code contributed by Google for optimized 64bit implementations of elliptic curves.
From the OpenSSL changelog, http://www.openssl.org/news/changelog.html
Specify "enable-ec_nistp_64_gcc_128" on the Configure (or config) command
line to include this in your build of OpenSSL, and run "make depend" (or
"make update"). This enables the following EC_METHODs:
So it really is as simple as enabling an additional compile flag. |
|
2012-08-19 08:10:23 |
cc |
bug |
|
|
added subscriber Colin Watson |
2012-10-09 06:59:32 |
cc |
attachment added |
|
openssl patch https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1018522/+attachment/3388669/+files/openssl.patch |
|
2012-10-09 08:18:10 |
Ubuntu Foundations Team Bug Bot |
tags |
64bit openssl |
64bit openssl patch |
|
2012-10-09 08:18:17 |
Ubuntu Foundations Team Bug Bot |
bug |
|
|
added subscriber Ubuntu Review Team |
2013-01-22 22:32:23 |
Launchpad Janitor |
openssl (Ubuntu): status |
New |
Confirmed |
|
2013-03-05 10:24:41 |
Dimitri John Ledkov |
openssl (Ubuntu): assignee |
|
Dmitrijs Ledkovs (xnox) |
|
2013-03-05 10:24:48 |
Dimitri John Ledkov |
nominated for series |
|
Ubuntu Precise |
|
2013-03-05 10:24:48 |
Dimitri John Ledkov |
bug task added |
|
openssl (Ubuntu Precise) |
|
2013-03-05 10:24:48 |
Dimitri John Ledkov |
nominated for series |
|
Ubuntu Quantal |
|
2013-03-05 10:24:48 |
Dimitri John Ledkov |
bug task added |
|
openssl (Ubuntu Quantal) |
|
2013-03-05 10:26:14 |
Dimitri John Ledkov |
openssl (Ubuntu Precise): status |
New |
Confirmed |
|
2013-03-05 10:26:16 |
Dimitri John Ledkov |
openssl (Ubuntu Quantal): status |
New |
Confirmed |
|
2013-03-05 10:26:20 |
Dimitri John Ledkov |
openssl (Ubuntu): importance |
Undecided |
High |
|
2013-03-05 10:26:23 |
Dimitri John Ledkov |
openssl (Ubuntu Precise): importance |
Undecided |
Low |
|
2013-03-05 10:26:27 |
Dimitri John Ledkov |
openssl (Ubuntu Precise): assignee |
|
Dmitrijs Ledkovs (xnox) |
|
2013-03-05 10:26:28 |
Dimitri John Ledkov |
openssl (Ubuntu Quantal): importance |
Undecided |
Low |
|
2013-03-05 10:26:29 |
Dimitri John Ledkov |
openssl (Ubuntu Quantal): assignee |
|
Dmitrijs Ledkovs (xnox) |
|
2013-03-07 16:32:11 |
Dimitri John Ledkov |
description |
This is to turn on the code contributed by Google for optimized 64bit implementations of elliptic curves.
From the OpenSSL changelog, http://www.openssl.org/news/changelog.html
Specify "enable-ec_nistp_64_gcc_128" on the Configure (or config) command
line to include this in your build of OpenSSL, and run "make depend" (or
"make update"). This enables the following EC_METHODs:
So it really is as simple as enabling an additional compile flag. |
[Impact]
* Optional optimisations that are available, were not enabled at build time, thus reducing openssl performance of ecdsa for 224, 256, 521 bit.
* This is an SRU as part of Hardware Enablement.
[Test Case]
* Compare `openssl speed` for ecdsa on amd64 platform. There should be noticeable improvement.
(Here is a sample from my machine, note that the below benchmarks were whilst the machine was under variable load)
Before:
Doing 224 bit sign ecdsa's for 10s: 24059 224 bit ECDSA signs in 9.95s
Doing 224 bit verify ecdsa's for 10s: 6197 224 bit ECDSA verify in 9.97s
Doing 256 bit sign ecdsa's for 10s: 20640 256 bit ECDSA signs in 9.94s
Doing 256 bit verify ecdsa's for 10s: 5222 256 bit ECDSA verify in 9.95s
Doing 521 bit sign ecdsa's for 10s: 5683 521 bit ECDSA signs in 9.97s
Doing 521 bit verify ecdsa's for 10s: 1137 521 bit ECDSA verify in 9.94s
After:
Doing 224 bit sign ecdsa's for 10s: 32087 224 bit ECDSA signs in 9.92s
Doing 224 bit verify ecdsa's for 10s: 15929 224 bit ECDSA verify in 9.94s
Doing 256 bit sign ecdsa's for 10s: 18875 256 bit ECDSA signs in 9.91s
Doing 256 bit verify ecdsa's for 10s: 7744 256 bit ECDSA verify in 9.94s
Doing 521 bit sign ecdsa's for 10s: 6587 521 bit ECDSA signs in 9.90s
Doing 521 bit verify ecdsa's for 10s: 3028 521 bit ECDSA verify in 9.85s
The almost threefold improvement in 224 & 521 verify is clearly visible.
[Regression Potential]
* This change affects only amd64 and only ecdsa.
* The test-suite passes correctly.
[Other Info]
This is to turn on the code contributed by Google for optimized 64bit implementations of elliptic curves.
From the OpenSSL changelog, http://www.openssl.org/news/changelog.html
Specify "enable-ec_nistp_64_gcc_128" on the Configure (or config) command
line to include this in your build of OpenSSL, and run "make depend" (or
"make update"). This enables the following EC_METHODs:
So it really is as simple as enabling an additional compile flag. |
|
2013-03-07 22:11:15 |
Launchpad Janitor |
openssl (Ubuntu): status |
Confirmed |
Fix Released |
|
2013-03-07 23:16:56 |
Dimitri John Ledkov |
openssl (Ubuntu Quantal): status |
Confirmed |
In Progress |
|
2013-03-07 23:16:56 |
Dimitri John Ledkov |
openssl (Ubuntu Quantal): assignee |
Dmitrijs Ledkovs (xnox) |
|
|
2013-03-07 23:17:17 |
Dimitri John Ledkov |
removed subscriber Ubuntu Review Team |
|
|
|
2013-03-07 23:17:25 |
Dimitri John Ledkov |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
2013-03-08 15:31:14 |
Dimitri John Ledkov |
openssl (Ubuntu Precise): status |
Confirmed |
In Progress |
|
2013-03-08 15:31:18 |
Dimitri John Ledkov |
openssl (Ubuntu Precise): assignee |
Dmitrijs Ledkovs (xnox) |
|
|
2013-04-15 14:56:43 |
Brian Murray |
openssl (Ubuntu Quantal): status |
In Progress |
Fix Committed |
|
2013-04-15 14:56:46 |
Brian Murray |
bug |
|
|
added subscriber SRU Verification |
2013-04-15 14:56:54 |
Brian Murray |
tags |
64bit openssl patch |
64bit openssl patch verification-needed |
|
2013-04-15 15:23:47 |
Brian Murray |
openssl (Ubuntu Precise): status |
In Progress |
Fix Committed |
|
2013-04-25 16:01:02 |
Felix Geyer |
tags |
64bit openssl patch verification-needed |
64bit openssl patch verification-done-precise verification-needed |
|
2013-04-29 16:50:10 |
Dimitri John Ledkov |
tags |
64bit openssl patch verification-done-precise verification-needed |
64bit openssl patch verification-done-precise verification-done-quantal verification-needed |
|
2013-05-06 19:34:13 |
Launchpad Janitor |
openssl (Ubuntu Precise): status |
Fix Committed |
Fix Released |
|
2013-05-06 19:34:21 |
Launchpad Janitor |
openssl (Ubuntu Quantal): status |
Fix Committed |
Fix Released |
|
2013-12-11 06:21:11 |
Launchpad Janitor |
branch linked |
|
lp:ubuntu/openssl |
|