Linux/OpenSSL Benchmark

[HITCHER]

# cat /proc/cpuinfo
processor       : 0
BogoMIPS        : 48.00
Features        : fp asimd evtstrm aes pmull sha1 sha2 crc32 atomics fphp asimdhp asimddp
CPU implementer : 0x41
CPU architecture: 8
CPU variant     : 0x2
CPU part        : 0xd05
CPU revision    : 0

processor       : 1
BogoMIPS        : 48.00
Features        : fp asimd evtstrm aes pmull sha1 sha2 crc32 atomics fphp asimdhp asimddp
CPU implementer : 0x41
CPU architecture: 8
CPU variant     : 0x2
CPU part        : 0xd05
CPU revision    : 0

processor       : 2
BogoMIPS        : 48.00
Features        : fp asimd evtstrm aes pmull sha1 sha2 crc32 atomics fphp asimdhp asimddp
CPU implementer : 0x41
CPU architecture: 8
CPU variant     : 0x2
CPU part        : 0xd05
CPU revision    : 0

processor       : 3
BogoMIPS        : 48.00
Features        : fp asimd evtstrm aes pmull sha1 sha2 crc32 atomics fphp asimdhp asimddp
CPU implementer : 0x41
CPU architecture: 8
CPU variant     : 0x2
CPU part        : 0xd05
CPU revision    : 0

Serial          : 01234567890123456789012345678900
model name      : Amlogic S905X4 rev b
Hardware        : Amlogic

version: 3.0.3
built on: Wed Jun 22 00:39:56 2022 UTC
options: bn(64,32)
compiler: /var/corebuild/CoreELEC-20/build.CoreELEC-Amlogic-ng.arm-20/toolchain/bin/armv8a-libreelec-linux-gnueabihf-gcc -fPIC -pthread -Wa,--noexecstack -march=armv8-a+crc -mtune=cortex-a53 -mabi=aapcs-linux -Wno-psabi -Wa,-mno-warn-deprecated -mfloat-abi=hard -mfpu=neon-fp-armv8 -Wall -pipe  -O2 -fomit-frame-pointer -DNDEBUG -march=armv8-a+crc -mtune=cortex-a53 -mabi=aapcs-linux -Wno-psabi -Wa,-mno-warn-deprecated -mfloat-abi=hard -mfpu=neon-fp-armv8 -Wall -pipe -O2 -fomit-frame-pointer -march=armv8-a+crc -mtune=cortex-a53 -fuse-ld=gold -DOPENSSL_USE_NODELETE -DOPENSSL_PIC -DOPENSSL_BUILDING_OPENSSL -DNDEBUG -DNDEBUG
CPUINFO: OPENSSL_armcap=0x3d
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes  16384 bytes
md5              16407.53k    55696.68k   153545.79k   268840.62k   348792.27k   353741.48k
sha1             18025.02k    67658.24k   220984.49k   518764.59k   843926.19k   890910.24k
sha256           17938.50k    67806.74k   220308.48k   501585.58k   810271.27k   840258.90k
sha512            8698.74k    34241.69k    66941.10k   104725.16k   125536.94k   127210.84k
hmac(md5)         9887.80k    35674.75k   110072.75k   230447.45k   338687.32k   350229.85k
des-ede3          8369.03k     8572.50k     8645.89k     8662.02k     8667.14k     8667.14k
aes-128-cbc     189714.78k   553418.58k  1063848.12k  1370276.52k  1501244.07k  1512084.82k
aes-192-cbc     180131.28k   493268.64k   855021.48k  1053701.46k  1129777.83k  1135646.04k
aes-256-cbc     174179.25k   448646.31k   734976.43k   885437.34k   932350.63k   936443.90k
camellia-128-cbc    48358.02k    57145.71k    60141.23k    60947.11k    61566.45k    61637.93k
camellia-192-cbc    39886.26k    45686.04k    47618.30k    48112.98k    48248.15k    48250.88k
camellia-256-cbc    39889.05k    46017.22k    47597.31k    48086.02k    48234.50k    48250.88k
ghash           140693.24k   449703.77k  1069764.27k  1639346.86k  1944035.33k  1971044.35k
rand              4447.90k    17746.81k    67203.61k   227141.55k   726421.05k   842898.70k
                  sign    verify    sign/s verify/s
rsa  512 bits 0.000264s 0.000018s   3784.3  55895.3
rsa 1024 bits 0.001169s 0.000046s    855.7  21631.2
rsa 2048 bits 0.006451s 0.000146s    155.0   6868.3
rsa 3072 bits 0.017726s 0.000301s     56.4   3318.7
rsa 4096 bits 0.037594s 0.000514s     26.6   1947.3
rsa 7680 bits 0.207347s 0.001703s      4.8    587.2
rsa 15360 bits 1.474286s 0.006579s      0.7    152.0
                  sign    verify    sign/s verify/s
dsa  512 bits 0.000375s 0.000232s   2667.3   4304.6
dsa 1024 bits 0.000724s 0.000548s   1381.7   1823.5
dsa 2048 bits 0.001923s 0.001632s    520.1    612.7
                              sign    verify    sign/s verify/s
 160 bits ecdsa (secp160r1)   0.0013s   0.0011s    774.2    892.6
 192 bits ecdsa (nistp192)   0.0018s   0.0015s    552.1    648.1
 224 bits ecdsa (nistp224)   0.0025s   0.0021s    398.3    480.2
 256 bits ecdsa (nistp256)   0.0003s   0.0008s   3984.3   1310.3
 384 bits ecdsa (nistp384)   0.0087s   0.0066s    114.5    152.5
 521 bits ecdsa (nistp521)   0.0211s   0.0154s     47.4     65.0
 256 bits ecdsa (brainpoolP256r1)   0.0025s   0.0022s    398.1    446.9
 256 bits ecdsa (brainpoolP256t1)   0.0025s   0.0021s    399.0    473.0
 384 bits ecdsa (brainpoolP384r1)   0.0087s   0.0072s    114.8    139.1
 384 bits ecdsa (brainpoolP384t1)   0.0086s   0.0066s    115.6    152.0
 512 bits ecdsa (brainpoolP512r1)   0.0103s   0.0084s     97.0    119.2
 512 bits ecdsa (brainpoolP512t1)   0.0103s   0.0078s     97.4    128.3
                              op      op/s
 160 bits ecdh (secp160r1)   0.0012s    830.7
 192 bits ecdh (nistp192)   0.0017s    582.9
 224 bits ecdh (nistp224)   0.0024s    419.9
 256 bits ecdh (nistp256)   0.0006s   1773.3
 384 bits ecdh (nistp384)   0.0083s    120.3
 521 bits ecdh (nistp521)   0.0200s     50.0
 256 bits ecdh (brainpoolP256r1)   0.0024s    421.7
 256 bits ecdh (brainpoolP256t1)   0.0024s    420.7
 384 bits ecdh (brainpoolP384r1)   0.0083s    120.6
 384 bits ecdh (brainpoolP384t1)   0.0082s    121.4
 512 bits ecdh (brainpoolP512r1)   0.0099s    101.2
 512 bits ecdh (brainpoolP512t1)   0.0098s    102.1
 253 bits ecdh (X25519)   0.0006s   1674.4
 448 bits ecdh (X448)   0.0035s    283.3
                              sign    verify    sign/s verify/s
 253 bits EdDSA (Ed25519)   0.0002s   0.0007s   4017.5   1506.2
 456 bits EdDSA (Ed448)   0.0018s   0.0040s    542.0    252.8
                              sign    verify    sign/s verify/s
 256 bits SM2 (CurveSM2)   0.0025s   0.0021s    395.6    487.2
                       op     op/s
2048 bits ffdh   0.0183s     54.5
3072 bits ffdh   0.0549s     18.2
4096 bits ffdh   0.1224s      8.2
6144 bits ffdh   0.3862s      2.6
8192 bits ffdh   0.8833s      1.1

 

[tomturbo]

Pi 4 haben wir noch keinen:

cat /proc/cpuinfo
processor       : 0
BogoMIPS        : 108.00
Features        : fp asimd evtstrm crc32 cpuid
CPU implementer : 0x41
CPU architecture: 8
CPU variant     : 0x0
CPU part        : 0xd08
CPU revision    : 3

processor       : 1
BogoMIPS        : 108.00
Features        : fp asimd evtstrm crc32 cpuid
CPU implementer : 0x41
CPU architecture: 8
CPU variant     : 0x0
CPU part        : 0xd08
CPU revision    : 3

processor       : 2
BogoMIPS        : 108.00
Features        : fp asimd evtstrm crc32 cpuid
CPU implementer : 0x41
CPU architecture: 8
CPU variant     : 0x0
CPU part        : 0xd08
CPU revision    : 3

processor       : 3
BogoMIPS        : 108.00
Features        : fp asimd evtstrm crc32 cpuid
CPU implementer : 0x41
CPU architecture: 8
CPU variant     : 0x0
CPU part        : 0xd08
CPU revision    : 3

Hardware        : BCM2835
Revision        : c03111
Serial          : 100000004bf5b016
Model           : Raspberry Pi 4 Model B Rev 1.1

awk: cannot open /etc/banner (No such file or directory)
| | 108.00 | 108.00 | 108.00 | 108.00 | BCM2835 | 1.1.1n | 245389650 | 196257450 | 144674190 | 196562600 | 38576470 | 13643780 | 86593190 | 73964540 | 64541350 | 183.8 | 6892.7 492.2 | 525.4 |

 

[tomturbo]

Einen Exoten hätt ich da:

cat /proc/cpuinfo 
processor       : 0
vendor_id       : AuthenticAMD
cpu family      : 20
model           : 2
model name      : AMD G-T56N Processor
stepping        : 0
microcode       : 0x5000101
cpu MHz         : 825.000
cache size      : 512 KB
physical id     : 0
siblings        : 2
core id         : 0
cpu cores       : 2
apicid          : 0
initial apicid  : 0
fpu             : yes
fpu_exception   : yes
cpuid level     : 6
wp              : yes
flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall
 nx mmxext fxsr_opt pdpe1gb rdtscp lm constant_tsc rep_good nopl nonstop_tsc cpuid extd_apicid aperfmperf pni monitor ssse3 cx
16 popcnt lahf_lm cmp_legacy svm extapic cr8_legacy abm sse4a misalignsse 3dnowprefetch ibs skinit wdt hw_pstate vmmcall arat
npt lbrv svm_lock nrip_save pausefilter
bugs            : fxsave_leak sysret_ss_attrs null_seg spectre_v1 spectre_v2 spec_store_bypass
bogomips        : 3292.75
TLB size        : 1024 4K pages
clflush size    : 64
cache_alignment : 64
address sizes   : 36 bits physical, 48 bits virtual
power management: ts ttp tm stc 100mhzsteps hwpstate

processor       : 1
vendor_id       : AuthenticAMD
cpu family      : 20
model           : 2
model name      : AMD G-T56N Processor
stepping        : 0
microcode       : 0x5000101
cpu MHz         : 825.083
cache size      : 512 KB
physical id     : 0
siblings        : 2
core id         : 1
cpu cores       : 2
apicid          : 1
initial apicid  : 1
fpu             : yes
fpu_exception   : yes
cpuid level     : 6
wp              : yes
flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall
 nx mmxext fxsr_opt pdpe1gb rdtscp lm constant_tsc rep_good nopl nonstop_tsc cpuid extd_apicid aperfmperf pni monitor ssse3 cx
16 popcnt lahf_lm cmp_legacy svm extapic cr8_legacy abm sse4a misalignsse 3dnowprefetch ibs skinit wdt hw_pstate vmmcall arat
npt lbrv svm_lock nrip_save pausefilter
bugs            : fxsave_leak sysret_ss_attrs null_seg spectre_v1 spectre_v2 spec_store_bypass
bogomips        : 3292.75
TLB size        : 1024 4K pages
clflush size    : 64
cache_alignment : 64
address sizes   : 36 bits physical, 48 bits virtual
power management: ts ttp tm stc 100mhzsteps hwpstate

awk: cannot open /etc/banner (No such file or directory)
| | AMD G-T56N Processor | AMD G-T56N Processor | 1.1.1n | 296417520 | 137308160 | 54581940 | 101217430 | 29213110 | 10244790
| 62458520 | 52374690 | 46797140 | 219.0 | 7830.9 541.3 | 614.8 |

 

[Mogul]

Nen PiZero hab ich auch seit kurzem ...was der wohl in meinem Netzwerk macht ^^

root@AdguardPie:~# cat /proc/cpuinfo
processor       : 0
model name      : ARMv6-compatible processor rev 7 (v6l)
BogoMIPS        : 1423.06
Features        : half thumb fastmult vfp edsp java tls
CPU implementer : 0x41
CPU architecture: 7
CPU variant     : 0x0
CPU part        : 0xb76
CPU revision    : 7

Hardware        : BCM2835
Revision        : 9000c1
Serial          : 0000000038c71ca4
Model           : Raspberry Pi Zero W Rev 1.1
root@AdguardPie:~#

awk: cannot open /etc/banner (No such file or directory)
| | 1423.06 | BCM2835 | 1.1.1n | 88030480 | 42632910 | 28035450 | 12127640 | 8375040 | 3035090 | 22598330 | 19454910 | 17302020 | 18.3 | 662.5 50.1 | 53.9 |

 

[HITCHER]

Zu den letzten 3 Benchmarks:
Mittlerweile ist OpenSSL doch Version 3.0.3, auch auf Fedora36, und das läuft mit den CPU Krypto Erweiterungen wohl schneller und effizienter.
Der über 2 Jahre alte Benchmark vom 3900x von vorhin ist somit auch weit überholt, sollte jetzt 3-4x so schnell AES-256 CBC berechnen können,
mit aktuellem openssl.

 

[Mogul]

Mein Pi Zero (hab ich geschenkt bekommen ) läuft mit DietPi. Ich hab tatsächlich keine Ahnung wie man auf v3 geht, ich bräuchte es nicht.

 

[HITCHER]

Unter ubuntu 22.04 für rpi4 gibt es openssl3 standardmäßig.
Ich mache von einem pi4, aber 64-bit und 2 GHz doch noch einen Benchmark vom raspios 64Bit mit openssl 1.1.1n (nur die gewünschten Werte),
vielleicht später auch mit Version 3.0:

#openssl speed md5 sha1 sha256 sha512 des des-ede3 aes-128-cbc aes-192-cbc aes-256-cbc rsa2048 dsa2048

OpenSSL 1.1.1n  15 Mar 2022
built on: Wed Jun 29 09:57:19 2022 UTC
options:bn(64,64) rc4(char) des(int) aes(partial) blowfish(ptr)
compiler: gcc -fPIC -pthread -Wa,--noexecstack -Wall -Wa,--noexecstack -g -O2 -ffile-prefix-map=/build/openssl-yaf6vc/openssl-1.1.1n=. -fstack-protector-strong -Wformat -Werror=format-security -DOPENSSL_USE_NODELETE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DKECCAK1600_ASM -DVPAES_ASM -DBSAES_ASM -DECP_NISTZ256_ASM -DPOLY1305_ASM -DNDEBUG -Wdate-time -D_FORTIFY_SOURCE=2
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes  16384 bytes
md5              58737.19k   134901.89k   239827.03k   298260.38k   319930.37k   321295.70k
sha1             47677.87k   109035.95k   192270.76k   238008.32k   255606.78k   256830.12k
des cbc          45206.06k    46546.99k    46831.10k    46931.63k    46992.04k    46912.85k
des ede3         16273.77k    16474.88k    16507.73k    16534.19k    16528.73k    16520.53k
aes-128 cbc      96608.22k   103174.95k   104421.03k   105284.27k   105431.04k   105289.05k
aes-192 cbc      83289.04k    88336.04k    89287.17k    89894.23k    89994.58k    89888.09k
aes-256 cbc      73499.20k    77249.98k    77964.12k    78423.38k    78514.86k    78397.44k
sha256           36410.86k    81040.75k   143678.72k   176465.92k   190051.66k   190109.01k
sha512           27297.23k   109513.45k   168828.07k   237686.78k   271690.41k   274098.86k
                  sign    verify    sign/s verify/s
rsa 2048 bits 0.004468s 0.000120s    223.8   8366.8
                  sign    verify    sign/s verify/s
dsa 2048 bits 0.001670s 0.001551s    598.7    644.8

 

[HITCHER]

openssl3 auf pi4b 4GB 2GHz unter ubuntu 22.04 64 bit, hat kleines Problem, da wenn man NEON "abschaltet", ist AES code schneller, den Bug gab es zuvor auch unter raspios.

#:~$OPENSSL_armcap=0 openssl speed md5 sha1 sha256 sha512 des des-ede3 aes-128-cbc aes-192-cbc aes-256-cbc rsa2048 dsa2048

version: 3.0.2
built on: Mon Jul  4 11:20:23 2022 UTC
options: bn(64,64)
compiler: gcc -fPIC -pthread -Wa,--noexecstack -Wall -Wa,--noexecstack -g -O2 -ffile-prefix-map=/build/openssl-EZGR4d/openssl-3.0.2=. -flto=auto -ffat-lto-objects -flto=auto -ffat-lto-objects -fstack-protector-strong -Wformat -Werror=format-security -DOPENSSL_TLS_SECURITY_LEVEL=2 -DOPENSSL_USE_NODELETE -DOPENSSL_PIC -DOPENSSL_BUILDING_OPENSSL -DNDEBUG -Wdate-time -D_FORTIFY_SOURCE=2
CPUINFO: OPENSSL_armcap=0x0 env:0
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes  16384 bytes
md5              27734.10k    83902.63k   186367.49k   271561.39k   314692.95k   317030.40k
sha1             24613.20k    70669.44k   153860.52k   220878.85k   252925.27k   254760.28k
sha256           20814.87k    56256.73k   114609.75k   154104.49k   172318.72k   173769.03k
sha512           17753.63k    71070.23k   138834.94k   221274.79k   268249.77k   271095.13k
des-cbc              0.00         0.00         0.00         0.00         0.00         0.00
des-ede3         16145.47k    16633.77k    16756.57k    16791.55k    16796.33k    16793.60k
aes-128-cbc      83671.35k    97421.53k   102828.20k   101825.19k   104423.42k   104164.01k
aes-192-cbc      72253.91k    84654.19k    87035.90k    86369.62k    88940.54k    88752.13k
aes-256-cbc      65586.09k    74571.31k    77121.62k    75874.65k    77657.43k    77534.55k
                  sign    verify    sign/s verify/s
rsa 2048 bits 0.004468s 0.000119s    223.8   8409.4
                  sign    verify    sign/s verify/s
dsa 2048 bits 0.001645s 0.001501s    607.9    666.2
202062BFFFFF0000:error:0308010C:digital envelope routines:inner_evp_generic_fetch:unsupported:../crypto/evp/evp_fetch.c:349:Global default library context, Algorithm (DES-CBC : 7), Properties ()

#:~$ openssl speed md5 sha1 sha256 sha512 des des-ede3 aes-128-cbc aes-192-cbc aes-256-cbc rsa2048 dsa2048

version: 3.0.2
built on: Mon Jul  4 11:20:23 2022 UTC
options: bn(64,64)
compiler: gcc -fPIC -pthread -Wa,--noexecstack -Wall -Wa,--noexecstack -g -O2 -ffile-prefix-map=/build/openssl-EZGR4d/openssl-3.0.2=. -flto=auto -ffat-lto-objects -flto=auto -ffat-lto-objects -fstack-protector-strong -Wformat -Werror=format-security -DOPENSSL_TLS_SECURITY_LEVEL=2 -DOPENSSL_USE_NODELETE -DOPENSSL_PIC -DOPENSSL_BUILDING_OPENSSL -DNDEBUG -Wdate-time -D_FORTIFY_SOURCE=2
CPUINFO: OPENSSL_armcap=0x83
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes  16384 bytes
md5              28047.33k    83816.90k   186086.83k   272648.53k   314455.38k   317581.99k
sha1             24930.41k    72227.77k   155389.18k   221542.06k   252728.66k   254973.27k
sha256           21543.13k    58805.63k   122175.91k   166920.53k   187246.11k   189104.13k
sha512           17630.58k    70816.34k   139281.83k   221447.85k   268214.27k   272341.53k
des-cbc              0.00         0.00         0.00         0.00         0.00         0.00
des-ede3         16151.90k    16582.89k    16706.05k    16744.11k    16741.72k    16749.91k
aes-128-cbc      51835.32k    54683.01k    55811.16k    56093.01k    56186.20k    56191.66k
aes-192-cbc      43830.98k    45791.13k    46788.18k    47050.41k    47052.12k    46929.24k
aes-256-cbc      37804.59k    39448.85k    40017.92k    40181.08k    40236.37k    40362.72k
                  sign    verify    sign/s verify/s
rsa 2048 bits 0.004470s 0.000119s    223.7   8407.0
                  sign    verify    sign/s verify/s
dsa 2048 bits 0.001647s 0.001507s    607.3    663.7

 

[Mogul]

Ich hab mal geschaut. OpenSSL3 auf dem Zero mit der Liteversion kompiliert, Stunden später.
Wenn ich das richtig lese ist es eher massiv langsamer? System ist das gleiche. Ich hab ne Vorlage genutzt und nicht die latest OpenSSL.

pi@raspberrypi:~ $ cat /etc/debian_version
11.3
pi@raspberrypi:~ $

OpenSSL 1.1.1n  15 Mar 2022
built on: Fri Mar 18 18:25:07 2022 UTC
options:bn(64,32) rc4(char) des(long) aes(partial) blowfish(ptr)
compiler: gcc -fPIC -pthread -Wa,--noexecstack -Wall -Wa,--noexecstack -g -O2 -ffile-prefix-map=/build/openssl-bpwqdg/openssl-1.1.1n=. -fstack-protector-strong -Wformat -Werror=format-security -DOPENSSL_USE_NODELETE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DKECCAK1600_ASM -DAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPOLY1305_ASM -DNDEBUG -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes  16384 bytes
md5               8960.01k    28946.40k    61356.93k    85026.98k    95791.01k    94559.09k
sha1              6257.29k    18507.96k    33178.85k    41507.71k    44845.35k    44408.06k
des cbc           7442.15k     8100.51k     8265.27k     8338.44k     8338.29k     8267.80k
des ede3          2799.82k     3012.25k     3013.79k     3033.11k     3029.00k     3015.35k
aes-128 cbc      17513.44k    21063.93k    22314.15k    22515.47k    22632.99k    22325.39k
aes-192 cbc      15567.17k    18382.99k    19304.68k    19564.11k    19605.21k    19467.01k
aes-256 cbc      14140.45k    16357.95k    17023.73k    17259.85k    17214.66k    17132.98k
sha256            4662.59k    12343.96k    22432.67k    28103.15k    30450.33k    30393.76k
sha512            1515.99k     6047.95k     8875.71k    12193.25k    13794.27k    13691.52k
                  sign    verify    sign/s verify/s
rsa 2048 bits 0.054451s 0.001512s     18.4    661.5
                  sign    verify    sign/s verify/s
dsa 2048 bits 0.019894s 0.018058s     50.3     55.4
awk: cannot open /etc/banner (No such file or directory)
| | 997.08 | BCM2835 | 1.1.1n | 85026980 | 41507710 | 28103150 | 12193250 | 8338440 | 3033110 | 22515470 | 19564110 | 17259850 | 18.4 | 661.5 50.3 | 55.4 |

root@raspberrypi:~#

-----------------------

version: 3.0.0-beta1
built on: built on: Thu Aug  4 11:51:17 2022 UTC
options:bn(64,32)
compiler: gcc -fPIC -pthread -Wa,--noexecstack -Wall -O3 -DOPENSSL_USE_NODELETE -DOPENSSL_PIC -DOPENSSL_BUILDING_OPENSSL -DNDEBUG
CPUINFO: OPENSSL_armcap=0x0
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes  16384 bytes
md5               2718.08k     9995.78k    30479.43k    62793.43k    90439.68k    90580.11k
sha1              2520.70k     8306.33k    21380.64k    35428.57k    43496.31k    43469.52k
sha256            2101.25k     6571.41k    15963.27k    24935.47k    30054.03k    29782.73k
sha512            1098.33k     4365.26k     7836.81k    11666.80k    13597.55k    13639.53k
des-cbc              0.00         0.00         0.00         0.00         0.00         0.00
des-ede3          2852.09k     3007.70k     3059.84k     3076.64k     3078.56k     3066.90k
aes-128-cbc      15402.92k    20758.58k    22758.31k    23220.27k    23568.88k    23089.20k
aes-192-cbc      14057.64k    18180.62k    19651.23k    20100.83k    20172.07k    19929.01k
aes-256-cbc      12765.66k    16217.06k    17298.14k    17603.03k    17766.58k    17550.12k
                  sign    verify    sign/s verify/s
rsa 2048 bits 0.054310s 0.001479s     18.4    676.2
                  sign    verify    sign/s verify/s
dsa 2048 bits 0.019727s 0.017841s     50.7     56.1
awk: cannot open /etc/banner (No such file or directory)
| | 997.08 | BCM2835 62793430 | 35428570 | 24935470 | 11666800 | 0.00 | 3078560 | 23568880 | 20172070 | 17766580 | 18.4 | 676.2 50.7 | 56.1 |

 

[HITCHER]

Ich denke, die meisten aktuellen SBC und Desktop-/Server Prozessoren können mittlerweile Krypto Erweiterungen in Hardware, um zB. AES und SHA zu beschleunigen. Da wird man bei neuem OpenSSL3 viel Augenmerk drauf gelegt haben, dass das unterstützt wird, sowie neue Algorithmen.
Die Raspberry SOC können das leider nicht, und dein Pi Zero 1 ist sowieso extrem langsam, ein Zero 2W wäre glaube ich 5x so schnell, ca. wie ein 3B+,
von dem ist der Benchmark, mit raspios und 32Bit Umgebung, Standard-Takt (ca. 1,4 GHz):

# openssl speed md5 sha1 sha256 sha512 des des-ede3 aes-128-cbc aes-192-cbc aes-256-cbc rsa2048 dsa2048
...
OpenSSL 1.1.1n  15 Mar 2022
built on: Thu May 19 07:25:14 2022 UTC
options:bn(64,32) rc4(char) des(long) aes(partial) blowfish(ptr)
compiler: gcc -fPIC -pthread -Wa,--noexecstack -Wall -D__ARM_MAX_ARCH__=7 -Wa,--noexecstack -g -O2 -ffile-prefix-map=/build/openssl-5mnHG2/openssl-1.1.1n=. -fstack-protector-strong -Wformat -Werror=format-security -DOPENSSL_USE_NODELETE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DKECCAK1600_ASM -DAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPOLY1305_ASM -DNDEBUG -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes  16384 bytes
md5              24545.98k    73490.79k   150003.46k   202458.11k   225831.59k   227721.22k
sha1             21131.63k    59625.11k   120787.80k   161945.94k   180142.08k   181600.26k
des cbc          15205.08k    16185.22k    16478.04k    16557.74k    16564.22k    16569.69k
des ede3          5786.80k     5943.98k     5985.71k     5996.20k     6002.01k     6002.01k
aes-128 cbc      43751.30k    51866.18k    54809.69k    55567.36k    55924.05k    55885.82k
aes-192 cbc      38506.03k    44592.28k    46792.36k    47381.85k    47562.75k    47600.98k
aes-256 cbc      34927.61k    39873.32k    41615.53k    42080.26k    42218.84k    42227.03k
sha256           14501.65k    36378.90k    68687.45k    89314.99k    97738.75k    99117.70k
sha512            8627.22k    34082.37k    54344.19k    76788.74k    87430.49k    88293.38k
                  sign    verify    sign/s verify/s
rsa 2048 bits 0.009921s 0.000232s    100.8   4318.2
                  sign    verify    sign/s verify/s
dsa 2048 bits 0.003049s 0.002662s    328.0    375.7



# OPENSSL_armcap=0 openssl speed md5 sha1 sha256 sha512 des des-ede3 aes-128-cbc aes-192-cbc aes-256-cbc rsa2048 dsa2048
...
OpenSSL 1.1.1n  15 Mar 2022
built on: Thu May 19 07:25:14 2022 UTC
options:bn(64,32) rc4(char) des(long) aes(partial) blowfish(ptr) 
compiler: gcc -fPIC -pthread -Wa,--noexecstack -Wall -D__ARM_MAX_ARCH__=7 -Wa,--noexecstack -g -O2 -ffile-prefix-map=/build/openssl-5mnHG2/openssl-1.1.1n=. -fstack-protector-strong -Wformat -Werror=format-security -DOPENSSL_USE_NODELETE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DKECCAK1600_ASM -DAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPOLY1305_ASM -DNDEBUG -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes  16384 bytes
md5              25153.83k    73491.16k   149970.94k   202295.64k   225610.41k   227606.53k
sha1             16976.10k    42880.34k    77498.79k    98179.75k   106348.54k   106998.44k
des cbc          15292.55k    16173.08k    16473.17k    16549.89k    16556.03k    16564.22k
des ede3          5810.45k     5973.23k     6017.02k     6028.97k     6029.31k     6029.31k
aes-128 cbc      43925.49k    51983.25k    54973.70k    55789.23k    56011.43k    56071.51k
aes-192 cbc      38533.16k    44604.59k    46797.57k    47365.46k    47535.45k    47600.98k
aes-256 cbc      34944.83k    39819.71k    41719.58k    42062.51k    42199.72k    42227.03k
sha256           13596.53k    33465.92k    60815.27k    76839.25k    83219.80k    83711.32k
sha512            4142.08k    16554.22k    23975.00k    32754.35k    36675.58k    36989.61k
                  sign    verify    sign/s verify/s
rsa 2048 bits 0.023194s 0.000626s     43.1   1598.0
                  sign    verify    sign/s verify/s
dsa 2048 bits 0.008251s 0.007547s    121.2    132.5

Wenn man bei dem NEON "abschaltet", hat das Auswirkungen, siehe oben.