openssl speed performance

Alexander Portnoy my-subs at
Wed Nov 24 05:43:50 PST 2004

Compare Your results with the results on the Athlon based notebook "HP Pavilion ze4523ea"
(AMD Athlon-XP Mobile 2400+ 1.8GHz 512KB L2 cache, 256MB DDR266 RAM, ALi chipset based MB,
Seagate ST93012A HDD) running FreeBSD 5.3-RELEASE-p1:

OpenSSL 0.9.7d 17 Mar 2004
built on: Sun Nov 21 08:04:55 IST 2004
options:bn(64,32) md2(int) rc4(idx,int) des(ptr,risc1,16,long) aes(partial) idea(int) blowfish(idx) 
compiler: cc
available timing options: USE_TOD HZ=128 [sysconf value]
timing function used: getrusage
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
md2               1461.94k     3121.67k     4379.01k     4851.33k     5012.79k
mdc2              4341.62k     5241.45k     5506.69k     5579.09k     5609.63k
md4              12511.55k    43928.95k   126317.65k   241420.53k   329338.90k
md5               9830.87k    32750.66k    87214.71k   149973.51k   190908.51k
hmac(md5)        12351.54k    39313.73k    99331.66k   160855.86k   195563.49k
sha1             10219.65k    30966.68k    70337.86k   103062.14k   119734.11k
rmd160            7233.74k    21121.28k    46230.28k    65910.78k    74993.56k
rc4             142942.15k   160620.87k   165003.87k   166941.84k   167535.53k
des cbc          46259.23k    48243.77k    48732.54k    48924.13k    48979.40k
des ede3         17330.48k    17607.44k    17713.47k    17740.34k    17747.83k
idea cbc         25333.27k    26590.33k    26929.46k    27016.77k    27042.04k
rc2 cbc          15750.27k    16400.24k    16570.88k    16617.35k    16673.05k
rc5-32/12 cbc   126410.07k   142507.29k   147297.94k   148236.66k   148743.07k
blowfish cbc     69932.54k    75323.41k    76268.81k    76740.34k    76872.74k
cast cbc         65229.65k    69262.32k    70198.63k    70588.47k    70699.30k
aes-128 cbc      38300.38k    39192.03k    39692.53k    39922.20k    39851.56k
aes-192 cbc      33457.23k    34129.29k    34598.41k    34603.94k    34628.37k
aes-256 cbc      29625.08k    30190.37k    30486.14k    30560.85k    30580.12k
                  sign    verify    sign/s verify/s
rsa  512 bits   0.0007s   0.0001s   1349.3  15545.4
rsa 1024 bits   0.0033s   0.0002s    300.5   5910.7
rsa 2048 bits   0.0186s   0.0005s     53.7   1877.0
rsa 4096 bits   0.1206s   0.0018s      8.3    545.2
                  sign    verify    sign/s verify/s
dsa  512 bits   0.0006s   0.0007s   1733.9   1452.1
dsa 1024 bits   0.0016s   0.0019s    643.8    527.4
dsa 2048 bits   0.0050s   0.0060s    198.4    165.8

There are my configuration files:


cd9660_load="YES"               # ISO 9660 filesystem
linprocfs_load="YES"            # Linux compatibility process filesystem
msdosfs_load="YES"              # FAT-12/16/32
nfs_load="YES"                  # NFS
ntfs_load="YES"                 # NTFS
unionfs_load="YES"              # Union filesystem
linux_load="YES"                        # Linux emulation
if_sis_load="YES"               # Silicon Integrated Systems SiS 900/7016
snd_t4dwave_load="YES"          # t4dwave
usb_load="YES"                  # USB subsystem
agp_load="YES"                  # agp module
random_load="YES"               # Random device


Kernel config:

machine         i386
cpu             I686_CPU                # aka Pentium Pro(tm)
options         CPU_ATHLON_SSE_HACK
options         CPU_ENABLE_SSE
device          isa
device          pci
device          npx
device          pmtimer                 # Adjust system timer at wakeup time
ident           ze4523ea-53-modular
options         INCLUDE_CONFIG_FILE     # Include this file in kernel
options         SCHED_4BSD
options         COMPAT_43
options         COMPAT_FREEBSD4
options         SYSVSHM
options         SYSVSEM
options         SYSVMSG
options         DDB
options         KDB
options         KTRACE                  #kernel tracing
options         INET                    #Internet communications protocols
options         IPSEC                   #IP security
options         IPSEC_ESP               #IP security (crypto; define w/ IPSEC)
options         NETSMBCRYPTO            #encrypted password support for SMB
device          ether                   #Generic Ethernet
device          loop                    #Network loopback device
device          bpf                     #Berkeley packet filter
options         PPP_BSDCOMP             #PPP BSD-compress support
options         PPP_DEFLATE             #PPP zlib/deflate/gzip support
options         PPP_FILTER              #enable bpf filtering (needs bpf)
options         IPFIREWALL_VERBOSE      #enable logging to syslogd(8)
options         IPFIREWALL_VERBOSE_LIMIT=100    #limit verbosity
options         IPFIREWALL_DEFAULT_TO_ACCEPT    #allow everything by default
options         IPDIVERT                #divert sockets
options         IPFILTER                #ipfilter support
options         IPFILTER_LOG            #ipfilter logging
options         IPSTEALTH               #support for stealth forwarding
options         TCP_DROP_SYNFIN         #drop TCP packets with SYN+FIN
options         FFS                     #Fast filesystem
options         SOFTUPDATES
options         UFS_EXTATTR
options         UFS_ACL
options         UFS_DIRHASH
options         QUOTA                   #enable disk quotas
device          scbus           #base SCSI code
device          da              #SCSI direct access devices (aka disks)
device          cd              #SCSI CD-ROMs
device          pass            #CAM passthrough driver
device          pty             #Pseudo ttys
device          atkbdc
device          atkbd
options         KBD_INSTALL_CDEV        # install a CDEV entry in /dev
device          psm
device          vga
device          sc
options         SC_HISTORY_SIZE=2000    # number of history buffer lines
options         SC_PIXEL_MODE           # add support for the raster text mode
options         SC_TWOBUTTON_MOUSE
device          ata
device          atadisk         # ATA disk drives
device          atapicd         # ATAPI CDROM drives
device          atapicam        # emulate ATAPI devices as SCSI ditto via CAM
                                # needs CAM to be present (scbus & pass)
options         ATA_STATIC_ID
device          sio
options         PANIC_REBOOT_WAIT_TIME=(-1)


CFLAGS= -O -pipe
NO_BLUETOOTH=   true    # do not build Bluetooth related stuff
NO_I4B= true    # do not build isdn4bsd package
NO_VINUM=       true    # do not build Vinum utilities
NOATM=          true    # do not build ATM related programs and libraries
NOGAMES=        true    # do not build games (games/ subdir)
NOINET6=        true    # do not build IPv6 related programs and libraries
NOPROFILE=      true    # Avoid compiling profiled libraries
MAKE_IDEA=      YES     # IDEA (128 bit symmetric encryption)
COMPAT4X=       yes

More information about the freebsd-performance mailing list