2 * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
3 * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
5 * Licensed under the OpenSSL license (the "License"). You may not use
6 * this file except in compliance with the License. You can obtain a copy
7 * in the file LICENSE in the source distribution or at
8 * https://www.openssl.org/source/license.html
13 #define RSA_SECONDS 10
14 #define DSA_SECONDS 10
15 #define ECDSA_SECONDS 10
16 #define ECDH_SECONDS 10
17 #define EdDSA_SECONDS 10
25 #include <openssl/crypto.h>
26 #include <openssl/rand.h>
27 #include <openssl/err.h>
28 #include <openssl/evp.h>
29 #include <openssl/objects.h>
30 #include <openssl/async.h>
31 #if !defined(OPENSSL_SYS_MSDOS)
32 # include OPENSSL_UNISTD
39 #include <openssl/bn.h>
40 #ifndef OPENSSL_NO_DES
41 # include <openssl/des.h>
43 #include <openssl/aes.h>
44 #ifndef OPENSSL_NO_CAMELLIA
45 # include <openssl/camellia.h>
47 #ifndef OPENSSL_NO_MD2
48 # include <openssl/md2.h>
50 #ifndef OPENSSL_NO_MDC2
51 # include <openssl/mdc2.h>
53 #ifndef OPENSSL_NO_MD4
54 # include <openssl/md4.h>
56 #ifndef OPENSSL_NO_MD5
57 # include <openssl/md5.h>
59 #include <openssl/hmac.h>
60 #include <openssl/sha.h>
61 #ifndef OPENSSL_NO_RMD160
62 # include <openssl/ripemd.h>
64 #ifndef OPENSSL_NO_WHIRLPOOL
65 # include <openssl/whrlpool.h>
67 #ifndef OPENSSL_NO_RC4
68 # include <openssl/rc4.h>
70 #ifndef OPENSSL_NO_RC5
71 # include <openssl/rc5.h>
73 #ifndef OPENSSL_NO_RC2
74 # include <openssl/rc2.h>
76 #ifndef OPENSSL_NO_IDEA
77 # include <openssl/idea.h>
79 #ifndef OPENSSL_NO_SEED
80 # include <openssl/seed.h>
83 # include <openssl/blowfish.h>
85 #ifndef OPENSSL_NO_CAST
86 # include <openssl/cast.h>
88 #ifndef OPENSSL_NO_RSA
89 # include <openssl/rsa.h>
90 # include "./testrsa.h"
92 #include <openssl/x509.h>
93 #ifndef OPENSSL_NO_DSA
94 # include <openssl/dsa.h>
95 # include "./testdsa.h"
98 # include <openssl/ec.h>
100 #include <openssl/modes.h>
103 # if defined(OPENSSL_SYS_VMS) || defined(OPENSSL_SYS_WINDOWS) || defined(OPENSSL_SYS_VXWORKS)
116 #define MAX_MISALIGNMENT 63
117 #define MAX_ECDH_SIZE 256
120 typedef struct openssl_speed_sec_st {
127 } openssl_speed_sec_t;
129 static volatile int run = 0;
132 static int usertime = 1;
134 #ifndef OPENSSL_NO_MD2
135 static int EVP_Digest_MD2_loop(void *args);
138 #ifndef OPENSSL_NO_MDC2
139 static int EVP_Digest_MDC2_loop(void *args);
141 #ifndef OPENSSL_NO_MD4
142 static int EVP_Digest_MD4_loop(void *args);
144 #ifndef OPENSSL_NO_MD5
145 static int MD5_loop(void *args);
146 static int HMAC_loop(void *args);
148 static int SHA1_loop(void *args);
149 static int SHA256_loop(void *args);
150 static int SHA512_loop(void *args);
151 #ifndef OPENSSL_NO_WHIRLPOOL
152 static int WHIRLPOOL_loop(void *args);
154 #ifndef OPENSSL_NO_RMD160
155 static int EVP_Digest_RMD160_loop(void *args);
157 #ifndef OPENSSL_NO_RC4
158 static int RC4_loop(void *args);
160 #ifndef OPENSSL_NO_DES
161 static int DES_ncbc_encrypt_loop(void *args);
162 static int DES_ede3_cbc_encrypt_loop(void *args);
164 static int AES_cbc_128_encrypt_loop(void *args);
165 static int AES_cbc_192_encrypt_loop(void *args);
166 static int AES_ige_128_encrypt_loop(void *args);
167 static int AES_cbc_256_encrypt_loop(void *args);
168 static int AES_ige_192_encrypt_loop(void *args);
169 static int AES_ige_256_encrypt_loop(void *args);
170 static int CRYPTO_gcm128_aad_loop(void *args);
171 static int RAND_bytes_loop(void *args);
172 static int EVP_Update_loop(void *args);
173 static int EVP_Update_loop_ccm(void *args);
174 static int EVP_Update_loop_aead(void *args);
175 static int EVP_Digest_loop(void *args);
176 #ifndef OPENSSL_NO_RSA
177 static int RSA_sign_loop(void *args);
178 static int RSA_verify_loop(void *args);
180 #ifndef OPENSSL_NO_DSA
181 static int DSA_sign_loop(void *args);
182 static int DSA_verify_loop(void *args);
184 #ifndef OPENSSL_NO_EC
185 static int ECDSA_sign_loop(void *args);
186 static int ECDSA_verify_loop(void *args);
187 static int EdDSA_sign_loop(void *args);
188 static int EdDSA_verify_loop(void *args);
191 static double Time_F(int s);
192 static void print_message(const char *s, long num, int length, int tm);
193 static void pkey_print_message(const char *str, const char *str2,
194 long num, unsigned int bits, int sec);
195 static void print_result(int alg, int run_no, int count, double time_used);
197 static int do_multi(int multi, int size_num);
200 static const int lengths_list[] = {
201 16, 64, 256, 1024, 8 * 1024, 16 * 1024
203 static const int *lengths = lengths_list;
205 static const int aead_lengths_list[] = {
206 2, 31, 136, 1024, 8 * 1024, 16 * 1024
214 static void alarmed(int sig)
216 signal(SIGALRM, alarmed);
220 static double Time_F(int s)
222 double ret = app_tminterval(s, usertime);
228 #elif defined(_WIN32)
232 static unsigned int lapse;
233 static volatile unsigned int schlock;
234 static void alarm_win32(unsigned int secs)
239 # define alarm alarm_win32
241 static DWORD WINAPI sleepy(VOID * arg)
249 static double Time_F(int s)
256 thr = CreateThread(NULL, 4096, sleepy, NULL, 0, NULL);
258 DWORD err = GetLastError();
259 BIO_printf(bio_err, "unable to CreateThread (%lu)", err);
263 Sleep(0); /* scheduler spinlock */
264 ret = app_tminterval(s, usertime);
266 ret = app_tminterval(s, usertime);
268 TerminateThread(thr, 0);
275 static double Time_F(int s)
277 return app_tminterval(s, usertime);
281 static void multiblock_speed(const EVP_CIPHER *evp_cipher, int lengths_single,
282 const openssl_speed_sec_t *seconds);
284 #define found(value, pairs, result)\
285 opt_found(value, result, pairs, OSSL_NELEM(pairs))
286 static int opt_found(const char *name, unsigned int *result,
287 const OPT_PAIR pairs[], unsigned int nbelem)
291 for (idx = 0; idx < nbelem; ++idx, pairs++)
292 if (strcmp(name, pairs->name) == 0) {
293 *result = pairs->retval;
299 typedef enum OPTION_choice {
300 OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
301 OPT_ELAPSED, OPT_EVP, OPT_DECRYPT, OPT_ENGINE, OPT_MULTI,
302 OPT_MR, OPT_MB, OPT_MISALIGN, OPT_ASYNCJOBS, OPT_R_ENUM,
303 OPT_PRIMES, OPT_SECONDS, OPT_BYTES, OPT_AEAD
306 const OPTIONS speed_options[] = {
307 {OPT_HELP_STR, 1, '-', "Usage: %s [options] ciphers...\n"},
308 {OPT_HELP_STR, 1, '-', "Valid options are:\n"},
309 {"help", OPT_HELP, '-', "Display this summary"},
310 {"evp", OPT_EVP, 's', "Use EVP-named cipher or digest"},
311 {"decrypt", OPT_DECRYPT, '-',
312 "Time decryption instead of encryption (only EVP)"},
313 {"aead", OPT_AEAD, '-',
314 "Benchmark EVP-named AEAD cipher in TLS-like sequence"},
316 "Enable (tls1>=1) multi-block mode on EVP-named cipher"},
317 {"mr", OPT_MR, '-', "Produce machine readable output"},
319 {"multi", OPT_MULTI, 'p', "Run benchmarks in parallel"},
321 #ifndef OPENSSL_NO_ASYNC
322 {"async_jobs", OPT_ASYNCJOBS, 'p',
323 "Enable async mode and start specified number of jobs"},
326 #ifndef OPENSSL_NO_ENGINE
327 {"engine", OPT_ENGINE, 's', "Use engine, possibly a hardware device"},
329 {"elapsed", OPT_ELAPSED, '-',
330 "Use wall-clock time instead of CPU user time as divisor"},
331 {"primes", OPT_PRIMES, 'p', "Specify number of primes (for RSA only)"},
332 {"seconds", OPT_SECONDS, 'p',
333 "Run benchmarks for specified amount of seconds"},
334 {"bytes", OPT_BYTES, 'p',
335 "Run [non-PKI] benchmarks on custom-sized buffer"},
336 {"misalign", OPT_MISALIGN, 'p',
337 "Use specified offset to mis-align buffers"},
351 #define D_CBC_IDEA 10
352 #define D_CBC_SEED 11
356 #define D_CBC_CAST 15
357 #define D_CBC_128_AES 16
358 #define D_CBC_192_AES 17
359 #define D_CBC_256_AES 18
360 #define D_CBC_128_CML 19
361 #define D_CBC_192_CML 20
362 #define D_CBC_256_CML 21
366 #define D_WHIRLPOOL 25
367 #define D_IGE_128_AES 26
368 #define D_IGE_192_AES 27
369 #define D_IGE_256_AES 28
372 /* name of algorithms to test */
373 static const char *names[] = {
374 "md2", "mdc2", "md4", "md5", "hmac(md5)", "sha1", "rmd160", "rc4",
375 "des cbc", "des ede3", "idea cbc", "seed cbc",
376 "rc2 cbc", "rc5-32/12 cbc", "blowfish cbc", "cast cbc",
377 "aes-128 cbc", "aes-192 cbc", "aes-256 cbc",
378 "camellia-128 cbc", "camellia-192 cbc", "camellia-256 cbc",
379 "evp", "sha256", "sha512", "whirlpool",
380 "aes-128 ige", "aes-192 ige", "aes-256 ige", "ghash",
383 #define ALGOR_NUM OSSL_NELEM(names)
385 /* list of configured algorithm (remaining) */
386 static const OPT_PAIR doit_choices[] = {
387 #ifndef OPENSSL_NO_MD2
390 #ifndef OPENSSL_NO_MDC2
393 #ifndef OPENSSL_NO_MD4
396 #ifndef OPENSSL_NO_MD5
401 {"sha256", D_SHA256},
402 {"sha512", D_SHA512},
403 #ifndef OPENSSL_NO_WHIRLPOOL
404 {"whirlpool", D_WHIRLPOOL},
406 #ifndef OPENSSL_NO_RMD160
407 {"ripemd", D_RMD160},
408 {"rmd160", D_RMD160},
409 {"ripemd160", D_RMD160},
411 #ifndef OPENSSL_NO_RC4
414 #ifndef OPENSSL_NO_DES
415 {"des-cbc", D_CBC_DES},
416 {"des-ede3", D_EDE3_DES},
418 {"aes-128-cbc", D_CBC_128_AES},
419 {"aes-192-cbc", D_CBC_192_AES},
420 {"aes-256-cbc", D_CBC_256_AES},
421 {"aes-128-ige", D_IGE_128_AES},
422 {"aes-192-ige", D_IGE_192_AES},
423 {"aes-256-ige", D_IGE_256_AES},
424 #ifndef OPENSSL_NO_RC2
425 {"rc2-cbc", D_CBC_RC2},
428 #ifndef OPENSSL_NO_RC5
429 {"rc5-cbc", D_CBC_RC5},
432 #ifndef OPENSSL_NO_IDEA
433 {"idea-cbc", D_CBC_IDEA},
434 {"idea", D_CBC_IDEA},
436 #ifndef OPENSSL_NO_SEED
437 {"seed-cbc", D_CBC_SEED},
438 {"seed", D_CBC_SEED},
440 #ifndef OPENSSL_NO_BF
441 {"bf-cbc", D_CBC_BF},
442 {"blowfish", D_CBC_BF},
445 #ifndef OPENSSL_NO_CAST
446 {"cast-cbc", D_CBC_CAST},
447 {"cast", D_CBC_CAST},
448 {"cast5", D_CBC_CAST},
454 static double results[ALGOR_NUM][OSSL_NELEM(lengths_list)];
456 #ifndef OPENSSL_NO_DSA
458 # define R_DSA_1024 1
459 # define R_DSA_2048 2
460 static const OPT_PAIR dsa_choices[] = {
461 {"dsa512", R_DSA_512},
462 {"dsa1024", R_DSA_1024},
463 {"dsa2048", R_DSA_2048}
465 # define DSA_NUM OSSL_NELEM(dsa_choices)
467 static double dsa_results[DSA_NUM][2]; /* 2 ops: sign then verify */
468 #endif /* OPENSSL_NO_DSA */
476 #define R_RSA_15360 6
477 #ifndef OPENSSL_NO_RSA
478 static const OPT_PAIR rsa_choices[] = {
479 {"rsa512", R_RSA_512},
480 {"rsa1024", R_RSA_1024},
481 {"rsa2048", R_RSA_2048},
482 {"rsa3072", R_RSA_3072},
483 {"rsa4096", R_RSA_4096},
484 {"rsa7680", R_RSA_7680},
485 {"rsa15360", R_RSA_15360}
487 # define RSA_NUM OSSL_NELEM(rsa_choices)
489 static double rsa_results[RSA_NUM][2]; /* 2 ops: sign then verify */
490 #endif /* OPENSSL_NO_RSA */
499 #ifndef OPENSSL_NO_EC2M
521 #ifndef OPENSSL_NO_EC
522 static OPT_PAIR ecdsa_choices[] = {
523 {"ecdsap160", R_EC_P160},
524 {"ecdsap192", R_EC_P192},
525 {"ecdsap224", R_EC_P224},
526 {"ecdsap256", R_EC_P256},
527 {"ecdsap384", R_EC_P384},
528 {"ecdsap521", R_EC_P521},
529 # ifndef OPENSSL_NO_EC2M
530 {"ecdsak163", R_EC_K163},
531 {"ecdsak233", R_EC_K233},
532 {"ecdsak283", R_EC_K283},
533 {"ecdsak409", R_EC_K409},
534 {"ecdsak571", R_EC_K571},
535 {"ecdsab163", R_EC_B163},
536 {"ecdsab233", R_EC_B233},
537 {"ecdsab283", R_EC_B283},
538 {"ecdsab409", R_EC_B409},
539 {"ecdsab571", R_EC_B571},
541 {"ecdsabrp256r1", R_EC_BRP256R1},
542 {"ecdsabrp256t1", R_EC_BRP256T1},
543 {"ecdsabrp384r1", R_EC_BRP384R1},
544 {"ecdsabrp384t1", R_EC_BRP384T1},
545 {"ecdsabrp512r1", R_EC_BRP512R1},
546 {"ecdsabrp512t1", R_EC_BRP512T1}
548 # define ECDSA_NUM OSSL_NELEM(ecdsa_choices)
550 static double ecdsa_results[ECDSA_NUM][2]; /* 2 ops: sign then verify */
552 static const OPT_PAIR ecdh_choices[] = {
553 {"ecdhp160", R_EC_P160},
554 {"ecdhp192", R_EC_P192},
555 {"ecdhp224", R_EC_P224},
556 {"ecdhp256", R_EC_P256},
557 {"ecdhp384", R_EC_P384},
558 {"ecdhp521", R_EC_P521},
559 # ifndef OPENSSL_NO_EC2M
560 {"ecdhk163", R_EC_K163},
561 {"ecdhk233", R_EC_K233},
562 {"ecdhk283", R_EC_K283},
563 {"ecdhk409", R_EC_K409},
564 {"ecdhk571", R_EC_K571},
565 {"ecdhb163", R_EC_B163},
566 {"ecdhb233", R_EC_B233},
567 {"ecdhb283", R_EC_B283},
568 {"ecdhb409", R_EC_B409},
569 {"ecdhb571", R_EC_B571},
571 {"ecdhbrp256r1", R_EC_BRP256R1},
572 {"ecdhbrp256t1", R_EC_BRP256T1},
573 {"ecdhbrp384r1", R_EC_BRP384R1},
574 {"ecdhbrp384t1", R_EC_BRP384T1},
575 {"ecdhbrp512r1", R_EC_BRP512R1},
576 {"ecdhbrp512t1", R_EC_BRP512T1},
577 {"ecdhx25519", R_EC_X25519},
578 {"ecdhx448", R_EC_X448}
580 # define EC_NUM OSSL_NELEM(ecdh_choices)
582 static double ecdh_results[EC_NUM][1]; /* 1 op: derivation */
584 #define R_EC_Ed25519 0
586 static OPT_PAIR eddsa_choices[] = {
587 {"ed25519", R_EC_Ed25519},
588 {"ed448", R_EC_Ed448}
590 # define EdDSA_NUM OSSL_NELEM(eddsa_choices)
592 static double eddsa_results[EdDSA_NUM][2]; /* 2 ops: sign then verify */
593 #endif /* OPENSSL_NO_EC */
596 # define COND(d) (count < (d))
597 # define COUNT(d) (d)
599 # define COND(unused_cond) (run && count<0x7fffffff)
600 # define COUNT(d) (count)
603 typedef struct loopargs_st {
604 ASYNC_JOB *inprogress_job;
605 ASYNC_WAIT_CTX *wait_ctx;
608 unsigned char *buf_malloc;
609 unsigned char *buf2_malloc;
613 #ifndef OPENSSL_NO_RSA
614 RSA *rsa_key[RSA_NUM];
616 #ifndef OPENSSL_NO_DSA
617 DSA *dsa_key[DSA_NUM];
619 #ifndef OPENSSL_NO_EC
620 EC_KEY *ecdsa[ECDSA_NUM];
621 EVP_PKEY_CTX *ecdh_ctx[EC_NUM];
622 EVP_MD_CTX *eddsa_ctx[EdDSA_NUM];
623 unsigned char *secret_a;
624 unsigned char *secret_b;
625 size_t outlen[EC_NUM];
629 GCM128_CONTEXT *gcm_ctx;
631 static int run_benchmark(int async_jobs, int (*loop_function) (void *),
632 loopargs_t * loopargs);
634 static unsigned int testnum;
636 /* Nb of iterations to do per algorithm and key-size */
637 static long c[ALGOR_NUM][OSSL_NELEM(lengths_list)];
639 #ifndef OPENSSL_NO_MD2
640 static int EVP_Digest_MD2_loop(void *args)
642 loopargs_t *tempargs = *(loopargs_t **) args;
643 unsigned char *buf = tempargs->buf;
644 unsigned char md2[MD2_DIGEST_LENGTH];
647 for (count = 0; COND(c[D_MD2][testnum]); count++) {
648 if (!EVP_Digest(buf, (size_t)lengths[testnum], md2, NULL, EVP_md2(),
656 #ifndef OPENSSL_NO_MDC2
657 static int EVP_Digest_MDC2_loop(void *args)
659 loopargs_t *tempargs = *(loopargs_t **) args;
660 unsigned char *buf = tempargs->buf;
661 unsigned char mdc2[MDC2_DIGEST_LENGTH];
664 for (count = 0; COND(c[D_MDC2][testnum]); count++) {
665 if (!EVP_Digest(buf, (size_t)lengths[testnum], mdc2, NULL, EVP_mdc2(),
673 #ifndef OPENSSL_NO_MD4
674 static int EVP_Digest_MD4_loop(void *args)
676 loopargs_t *tempargs = *(loopargs_t **) args;
677 unsigned char *buf = tempargs->buf;
678 unsigned char md4[MD4_DIGEST_LENGTH];
681 for (count = 0; COND(c[D_MD4][testnum]); count++) {
682 if (!EVP_Digest(buf, (size_t)lengths[testnum], md4, NULL, EVP_md4(),
690 #ifndef OPENSSL_NO_MD5
691 static int MD5_loop(void *args)
693 loopargs_t *tempargs = *(loopargs_t **) args;
694 unsigned char *buf = tempargs->buf;
695 unsigned char md5[MD5_DIGEST_LENGTH];
697 for (count = 0; COND(c[D_MD5][testnum]); count++)
698 MD5(buf, lengths[testnum], md5);
702 static int HMAC_loop(void *args)
704 loopargs_t *tempargs = *(loopargs_t **) args;
705 unsigned char *buf = tempargs->buf;
706 HMAC_CTX *hctx = tempargs->hctx;
707 unsigned char hmac[MD5_DIGEST_LENGTH];
710 for (count = 0; COND(c[D_HMAC][testnum]); count++) {
711 HMAC_Init_ex(hctx, NULL, 0, NULL, NULL);
712 HMAC_Update(hctx, buf, lengths[testnum]);
713 HMAC_Final(hctx, hmac, NULL);
719 static int SHA1_loop(void *args)
721 loopargs_t *tempargs = *(loopargs_t **) args;
722 unsigned char *buf = tempargs->buf;
723 unsigned char sha[SHA_DIGEST_LENGTH];
725 for (count = 0; COND(c[D_SHA1][testnum]); count++)
726 SHA1(buf, lengths[testnum], sha);
730 static int SHA256_loop(void *args)
732 loopargs_t *tempargs = *(loopargs_t **) args;
733 unsigned char *buf = tempargs->buf;
734 unsigned char sha256[SHA256_DIGEST_LENGTH];
736 for (count = 0; COND(c[D_SHA256][testnum]); count++)
737 SHA256(buf, lengths[testnum], sha256);
741 static int SHA512_loop(void *args)
743 loopargs_t *tempargs = *(loopargs_t **) args;
744 unsigned char *buf = tempargs->buf;
745 unsigned char sha512[SHA512_DIGEST_LENGTH];
747 for (count = 0; COND(c[D_SHA512][testnum]); count++)
748 SHA512(buf, lengths[testnum], sha512);
752 #ifndef OPENSSL_NO_WHIRLPOOL
753 static int WHIRLPOOL_loop(void *args)
755 loopargs_t *tempargs = *(loopargs_t **) args;
756 unsigned char *buf = tempargs->buf;
757 unsigned char whirlpool[WHIRLPOOL_DIGEST_LENGTH];
759 for (count = 0; COND(c[D_WHIRLPOOL][testnum]); count++)
760 WHIRLPOOL(buf, lengths[testnum], whirlpool);
765 #ifndef OPENSSL_NO_RMD160
766 static int EVP_Digest_RMD160_loop(void *args)
768 loopargs_t *tempargs = *(loopargs_t **) args;
769 unsigned char *buf = tempargs->buf;
770 unsigned char rmd160[RIPEMD160_DIGEST_LENGTH];
772 for (count = 0; COND(c[D_RMD160][testnum]); count++) {
773 if (!EVP_Digest(buf, (size_t)lengths[testnum], &(rmd160[0]),
774 NULL, EVP_ripemd160(), NULL))
781 #ifndef OPENSSL_NO_RC4
782 static RC4_KEY rc4_ks;
783 static int RC4_loop(void *args)
785 loopargs_t *tempargs = *(loopargs_t **) args;
786 unsigned char *buf = tempargs->buf;
788 for (count = 0; COND(c[D_RC4][testnum]); count++)
789 RC4(&rc4_ks, (size_t)lengths[testnum], buf, buf);
794 #ifndef OPENSSL_NO_DES
795 static unsigned char DES_iv[8];
796 static DES_key_schedule sch;
797 static DES_key_schedule sch2;
798 static DES_key_schedule sch3;
799 static int DES_ncbc_encrypt_loop(void *args)
801 loopargs_t *tempargs = *(loopargs_t **) args;
802 unsigned char *buf = tempargs->buf;
804 for (count = 0; COND(c[D_CBC_DES][testnum]); count++)
805 DES_ncbc_encrypt(buf, buf, lengths[testnum], &sch,
806 &DES_iv, DES_ENCRYPT);
810 static int DES_ede3_cbc_encrypt_loop(void *args)
812 loopargs_t *tempargs = *(loopargs_t **) args;
813 unsigned char *buf = tempargs->buf;
815 for (count = 0; COND(c[D_EDE3_DES][testnum]); count++)
816 DES_ede3_cbc_encrypt(buf, buf, lengths[testnum],
817 &sch, &sch2, &sch3, &DES_iv, DES_ENCRYPT);
822 #define MAX_BLOCK_SIZE 128
824 static unsigned char iv[2 * MAX_BLOCK_SIZE / 8];
825 static AES_KEY aes_ks1, aes_ks2, aes_ks3;
826 static int AES_cbc_128_encrypt_loop(void *args)
828 loopargs_t *tempargs = *(loopargs_t **) args;
829 unsigned char *buf = tempargs->buf;
831 for (count = 0; COND(c[D_CBC_128_AES][testnum]); count++)
832 AES_cbc_encrypt(buf, buf,
833 (size_t)lengths[testnum], &aes_ks1, iv, AES_ENCRYPT);
837 static int AES_cbc_192_encrypt_loop(void *args)
839 loopargs_t *tempargs = *(loopargs_t **) args;
840 unsigned char *buf = tempargs->buf;
842 for (count = 0; COND(c[D_CBC_192_AES][testnum]); count++)
843 AES_cbc_encrypt(buf, buf,
844 (size_t)lengths[testnum], &aes_ks2, iv, AES_ENCRYPT);
848 static int AES_cbc_256_encrypt_loop(void *args)
850 loopargs_t *tempargs = *(loopargs_t **) args;
851 unsigned char *buf = tempargs->buf;
853 for (count = 0; COND(c[D_CBC_256_AES][testnum]); count++)
854 AES_cbc_encrypt(buf, buf,
855 (size_t)lengths[testnum], &aes_ks3, iv, AES_ENCRYPT);
859 static int AES_ige_128_encrypt_loop(void *args)
861 loopargs_t *tempargs = *(loopargs_t **) args;
862 unsigned char *buf = tempargs->buf;
863 unsigned char *buf2 = tempargs->buf2;
865 for (count = 0; COND(c[D_IGE_128_AES][testnum]); count++)
866 AES_ige_encrypt(buf, buf2,
867 (size_t)lengths[testnum], &aes_ks1, iv, AES_ENCRYPT);
871 static int AES_ige_192_encrypt_loop(void *args)
873 loopargs_t *tempargs = *(loopargs_t **) args;
874 unsigned char *buf = tempargs->buf;
875 unsigned char *buf2 = tempargs->buf2;
877 for (count = 0; COND(c[D_IGE_192_AES][testnum]); count++)
878 AES_ige_encrypt(buf, buf2,
879 (size_t)lengths[testnum], &aes_ks2, iv, AES_ENCRYPT);
883 static int AES_ige_256_encrypt_loop(void *args)
885 loopargs_t *tempargs = *(loopargs_t **) args;
886 unsigned char *buf = tempargs->buf;
887 unsigned char *buf2 = tempargs->buf2;
889 for (count = 0; COND(c[D_IGE_256_AES][testnum]); count++)
890 AES_ige_encrypt(buf, buf2,
891 (size_t)lengths[testnum], &aes_ks3, iv, AES_ENCRYPT);
895 static int CRYPTO_gcm128_aad_loop(void *args)
897 loopargs_t *tempargs = *(loopargs_t **) args;
898 unsigned char *buf = tempargs->buf;
899 GCM128_CONTEXT *gcm_ctx = tempargs->gcm_ctx;
901 for (count = 0; COND(c[D_GHASH][testnum]); count++)
902 CRYPTO_gcm128_aad(gcm_ctx, buf, lengths[testnum]);
906 static int RAND_bytes_loop(void *args)
908 loopargs_t *tempargs = *(loopargs_t **) args;
909 unsigned char *buf = tempargs->buf;
912 for (count = 0; COND(c[D_RAND][testnum]); count++)
913 RAND_bytes(buf, lengths[testnum]);
917 static long save_count = 0;
918 static int decrypt = 0;
919 static int EVP_Update_loop(void *args)
921 loopargs_t *tempargs = *(loopargs_t **) args;
922 unsigned char *buf = tempargs->buf;
923 EVP_CIPHER_CTX *ctx = tempargs->ctx;
926 int nb_iter = save_count * 4 * lengths[0] / lengths[testnum];
929 for (count = 0; COND(nb_iter); count++) {
930 rc = EVP_DecryptUpdate(ctx, buf, &outl, buf, lengths[testnum]);
932 /* reset iv in case of counter overflow */
933 EVP_CipherInit_ex(ctx, NULL, NULL, NULL, iv, -1);
937 for (count = 0; COND(nb_iter); count++) {
938 rc = EVP_EncryptUpdate(ctx, buf, &outl, buf, lengths[testnum]);
940 /* reset iv in case of counter overflow */
941 EVP_CipherInit_ex(ctx, NULL, NULL, NULL, iv, -1);
946 EVP_DecryptFinal_ex(ctx, buf, &outl);
948 EVP_EncryptFinal_ex(ctx, buf, &outl);
953 * CCM does not support streaming. For the purpose of performance measurement,
954 * each message is encrypted using the same (key,iv)-pair. Do not use this
955 * code in your application.
957 static int EVP_Update_loop_ccm(void *args)
959 loopargs_t *tempargs = *(loopargs_t **) args;
960 unsigned char *buf = tempargs->buf;
961 EVP_CIPHER_CTX *ctx = tempargs->ctx;
963 unsigned char tag[12];
965 int nb_iter = save_count * 4 * lengths[0] / lengths[testnum];
968 for (count = 0; COND(nb_iter); count++) {
969 EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_AEAD_SET_TAG, sizeof(tag), tag);
971 EVP_DecryptInit_ex(ctx, NULL, NULL, NULL, iv);
972 /* counter is reset on every update */
973 EVP_DecryptUpdate(ctx, buf, &outl, buf, lengths[testnum]);
976 for (count = 0; COND(nb_iter); count++) {
977 /* restore iv length field */
978 EVP_EncryptUpdate(ctx, NULL, &outl, NULL, lengths[testnum]);
979 /* counter is reset on every update */
980 EVP_EncryptUpdate(ctx, buf, &outl, buf, lengths[testnum]);
984 EVP_DecryptFinal_ex(ctx, buf, &outl);
986 EVP_EncryptFinal_ex(ctx, buf, &outl);
991 * To make AEAD benchmarking more relevant perform TLS-like operations,
992 * 13-byte AAD followed by payload. But don't use TLS-formatted AAD, as
993 * payload length is not actually limited by 16KB...
995 static int EVP_Update_loop_aead(void *args)
997 loopargs_t *tempargs = *(loopargs_t **) args;
998 unsigned char *buf = tempargs->buf;
999 EVP_CIPHER_CTX *ctx = tempargs->ctx;
1001 unsigned char aad[13] = { 0xcc };
1002 unsigned char faketag[16] = { 0xcc };
1004 int nb_iter = save_count * 4 * lengths[0] / lengths[testnum];
1007 for (count = 0; COND(nb_iter); count++) {
1008 EVP_DecryptInit_ex(ctx, NULL, NULL, NULL, iv);
1009 EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_AEAD_SET_TAG,
1010 sizeof(faketag), faketag);
1011 EVP_DecryptUpdate(ctx, NULL, &outl, aad, sizeof(aad));
1012 EVP_DecryptUpdate(ctx, buf, &outl, buf, lengths[testnum]);
1013 EVP_DecryptFinal_ex(ctx, buf + outl, &outl);
1016 for (count = 0; COND(nb_iter); count++) {
1017 EVP_EncryptInit_ex(ctx, NULL, NULL, NULL, iv);
1018 EVP_EncryptUpdate(ctx, NULL, &outl, aad, sizeof(aad));
1019 EVP_EncryptUpdate(ctx, buf, &outl, buf, lengths[testnum]);
1020 EVP_EncryptFinal_ex(ctx, buf + outl, &outl);
1026 static const EVP_MD *evp_md = NULL;
1027 static int EVP_Digest_loop(void *args)
1029 loopargs_t *tempargs = *(loopargs_t **) args;
1030 unsigned char *buf = tempargs->buf;
1031 unsigned char md[EVP_MAX_MD_SIZE];
1034 int nb_iter = save_count * 4 * lengths[0] / lengths[testnum];
1037 for (count = 0; COND(nb_iter); count++) {
1038 if (!EVP_Digest(buf, lengths[testnum], md, NULL, evp_md, NULL))
1044 #ifndef OPENSSL_NO_RSA
1045 static long rsa_c[RSA_NUM][2]; /* # RSA iteration test */
1047 static int RSA_sign_loop(void *args)
1049 loopargs_t *tempargs = *(loopargs_t **) args;
1050 unsigned char *buf = tempargs->buf;
1051 unsigned char *buf2 = tempargs->buf2;
1052 unsigned int *rsa_num = &tempargs->siglen;
1053 RSA **rsa_key = tempargs->rsa_key;
1055 for (count = 0; COND(rsa_c[testnum][0]); count++) {
1056 ret = RSA_sign(NID_md5_sha1, buf, 36, buf2, rsa_num, rsa_key[testnum]);
1058 BIO_printf(bio_err, "RSA sign failure\n");
1059 ERR_print_errors(bio_err);
1067 static int RSA_verify_loop(void *args)
1069 loopargs_t *tempargs = *(loopargs_t **) args;
1070 unsigned char *buf = tempargs->buf;
1071 unsigned char *buf2 = tempargs->buf2;
1072 unsigned int rsa_num = tempargs->siglen;
1073 RSA **rsa_key = tempargs->rsa_key;
1075 for (count = 0; COND(rsa_c[testnum][1]); count++) {
1077 RSA_verify(NID_md5_sha1, buf, 36, buf2, rsa_num, rsa_key[testnum]);
1079 BIO_printf(bio_err, "RSA verify failure\n");
1080 ERR_print_errors(bio_err);
1089 #ifndef OPENSSL_NO_DSA
1090 static long dsa_c[DSA_NUM][2];
1091 static int DSA_sign_loop(void *args)
1093 loopargs_t *tempargs = *(loopargs_t **) args;
1094 unsigned char *buf = tempargs->buf;
1095 unsigned char *buf2 = tempargs->buf2;
1096 DSA **dsa_key = tempargs->dsa_key;
1097 unsigned int *siglen = &tempargs->siglen;
1099 for (count = 0; COND(dsa_c[testnum][0]); count++) {
1100 ret = DSA_sign(0, buf, 20, buf2, siglen, dsa_key[testnum]);
1102 BIO_printf(bio_err, "DSA sign failure\n");
1103 ERR_print_errors(bio_err);
1111 static int DSA_verify_loop(void *args)
1113 loopargs_t *tempargs = *(loopargs_t **) args;
1114 unsigned char *buf = tempargs->buf;
1115 unsigned char *buf2 = tempargs->buf2;
1116 DSA **dsa_key = tempargs->dsa_key;
1117 unsigned int siglen = tempargs->siglen;
1119 for (count = 0; COND(dsa_c[testnum][1]); count++) {
1120 ret = DSA_verify(0, buf, 20, buf2, siglen, dsa_key[testnum]);
1122 BIO_printf(bio_err, "DSA verify failure\n");
1123 ERR_print_errors(bio_err);
1132 #ifndef OPENSSL_NO_EC
1133 static long ecdsa_c[ECDSA_NUM][2];
1134 static int ECDSA_sign_loop(void *args)
1136 loopargs_t *tempargs = *(loopargs_t **) args;
1137 unsigned char *buf = tempargs->buf;
1138 EC_KEY **ecdsa = tempargs->ecdsa;
1139 unsigned char *ecdsasig = tempargs->buf2;
1140 unsigned int *ecdsasiglen = &tempargs->siglen;
1142 for (count = 0; COND(ecdsa_c[testnum][0]); count++) {
1143 ret = ECDSA_sign(0, buf, 20, ecdsasig, ecdsasiglen, ecdsa[testnum]);
1145 BIO_printf(bio_err, "ECDSA sign failure\n");
1146 ERR_print_errors(bio_err);
1154 static int ECDSA_verify_loop(void *args)
1156 loopargs_t *tempargs = *(loopargs_t **) args;
1157 unsigned char *buf = tempargs->buf;
1158 EC_KEY **ecdsa = tempargs->ecdsa;
1159 unsigned char *ecdsasig = tempargs->buf2;
1160 unsigned int ecdsasiglen = tempargs->siglen;
1162 for (count = 0; COND(ecdsa_c[testnum][1]); count++) {
1163 ret = ECDSA_verify(0, buf, 20, ecdsasig, ecdsasiglen, ecdsa[testnum]);
1165 BIO_printf(bio_err, "ECDSA verify failure\n");
1166 ERR_print_errors(bio_err);
1174 /* ******************************************************************** */
1175 static long ecdh_c[EC_NUM][1];
1177 static int ECDH_EVP_derive_key_loop(void *args)
1179 loopargs_t *tempargs = *(loopargs_t **) args;
1180 EVP_PKEY_CTX *ctx = tempargs->ecdh_ctx[testnum];
1181 unsigned char *derived_secret = tempargs->secret_a;
1183 size_t *outlen = &(tempargs->outlen[testnum]);
1185 for (count = 0; COND(ecdh_c[testnum][0]); count++)
1186 EVP_PKEY_derive(ctx, derived_secret, outlen);
1191 static long eddsa_c[EdDSA_NUM][2];
1192 static int EdDSA_sign_loop(void *args)
1194 loopargs_t *tempargs = *(loopargs_t **) args;
1195 unsigned char *buf = tempargs->buf;
1196 EVP_MD_CTX **edctx = tempargs->eddsa_ctx;
1197 unsigned char *eddsasig = tempargs->buf2;
1198 size_t *eddsasigsize = &tempargs->sigsize;
1201 for (count = 0; COND(eddsa_c[testnum][0]); count++) {
1202 ret = EVP_DigestSign(edctx[testnum], eddsasig, eddsasigsize, buf, 20);
1204 BIO_printf(bio_err, "EdDSA sign failure\n");
1205 ERR_print_errors(bio_err);
1213 static int EdDSA_verify_loop(void *args)
1215 loopargs_t *tempargs = *(loopargs_t **) args;
1216 unsigned char *buf = tempargs->buf;
1217 EVP_MD_CTX **edctx = tempargs->eddsa_ctx;
1218 unsigned char *eddsasig = tempargs->buf2;
1219 size_t eddsasigsize = tempargs->sigsize;
1222 for (count = 0; COND(eddsa_c[testnum][1]); count++) {
1223 ret = EVP_DigestVerify(edctx[testnum], eddsasig, eddsasigsize, buf, 20);
1225 BIO_printf(bio_err, "EdDSA verify failure\n");
1226 ERR_print_errors(bio_err);
1233 #endif /* OPENSSL_NO_EC */
1235 static int run_benchmark(int async_jobs,
1236 int (*loop_function) (void *), loopargs_t * loopargs)
1238 int job_op_count = 0;
1239 int total_op_count = 0;
1240 int num_inprogress = 0;
1241 int error = 0, i = 0, ret = 0;
1242 OSSL_ASYNC_FD job_fd = 0;
1243 size_t num_job_fds = 0;
1245 if (async_jobs == 0) {
1246 return loop_function((void *)&loopargs);
1249 for (i = 0; i < async_jobs && !error; i++) {
1250 loopargs_t *looparg_item = loopargs + i;
1252 /* Copy pointer content (looparg_t item address) into async context */
1253 ret = ASYNC_start_job(&loopargs[i].inprogress_job, loopargs[i].wait_ctx,
1254 &job_op_count, loop_function,
1255 (void *)&looparg_item, sizeof(looparg_item));
1261 if (job_op_count == -1) {
1264 total_op_count += job_op_count;
1269 BIO_printf(bio_err, "Failure in the job\n");
1270 ERR_print_errors(bio_err);
1276 while (num_inprogress > 0) {
1277 #if defined(OPENSSL_SYS_WINDOWS)
1279 #elif defined(OPENSSL_SYS_UNIX)
1280 int select_result = 0;
1281 OSSL_ASYNC_FD max_fd = 0;
1284 FD_ZERO(&waitfdset);
1286 for (i = 0; i < async_jobs && num_inprogress > 0; i++) {
1287 if (loopargs[i].inprogress_job == NULL)
1290 if (!ASYNC_WAIT_CTX_get_all_fds
1291 (loopargs[i].wait_ctx, NULL, &num_job_fds)
1292 || num_job_fds > 1) {
1293 BIO_printf(bio_err, "Too many fds in ASYNC_WAIT_CTX\n");
1294 ERR_print_errors(bio_err);
1298 ASYNC_WAIT_CTX_get_all_fds(loopargs[i].wait_ctx, &job_fd,
1300 FD_SET(job_fd, &waitfdset);
1301 if (job_fd > max_fd)
1305 if (max_fd >= (OSSL_ASYNC_FD)FD_SETSIZE) {
1307 "Error: max_fd (%d) must be smaller than FD_SETSIZE (%d). "
1308 "Decrease the value of async_jobs\n",
1309 max_fd, FD_SETSIZE);
1310 ERR_print_errors(bio_err);
1315 select_result = select(max_fd + 1, &waitfdset, NULL, NULL, NULL);
1316 if (select_result == -1 && errno == EINTR)
1319 if (select_result == -1) {
1320 BIO_printf(bio_err, "Failure in the select\n");
1321 ERR_print_errors(bio_err);
1326 if (select_result == 0)
1330 for (i = 0; i < async_jobs; i++) {
1331 if (loopargs[i].inprogress_job == NULL)
1334 if (!ASYNC_WAIT_CTX_get_all_fds
1335 (loopargs[i].wait_ctx, NULL, &num_job_fds)
1336 || num_job_fds > 1) {
1337 BIO_printf(bio_err, "Too many fds in ASYNC_WAIT_CTX\n");
1338 ERR_print_errors(bio_err);
1342 ASYNC_WAIT_CTX_get_all_fds(loopargs[i].wait_ctx, &job_fd,
1345 #if defined(OPENSSL_SYS_UNIX)
1346 if (num_job_fds == 1 && !FD_ISSET(job_fd, &waitfdset))
1348 #elif defined(OPENSSL_SYS_WINDOWS)
1349 if (num_job_fds == 1
1350 && !PeekNamedPipe(job_fd, NULL, 0, NULL, &avail, NULL)
1355 ret = ASYNC_start_job(&loopargs[i].inprogress_job,
1356 loopargs[i].wait_ctx, &job_op_count,
1357 loop_function, (void *)(loopargs + i),
1358 sizeof(loopargs_t));
1363 if (job_op_count == -1) {
1366 total_op_count += job_op_count;
1369 loopargs[i].inprogress_job = NULL;
1374 loopargs[i].inprogress_job = NULL;
1375 BIO_printf(bio_err, "Failure in the job\n");
1376 ERR_print_errors(bio_err);
1383 return error ? -1 : total_op_count;
1386 int speed_main(int argc, char **argv)
1389 loopargs_t *loopargs = NULL;
1391 const char *engine_id = NULL;
1392 const EVP_CIPHER *evp_cipher = NULL;
1395 int async_init = 0, multiblock = 0, pr_header = 0;
1396 int doit[ALGOR_NUM] = { 0 };
1397 int ret = 1, misalign = 0, lengths_single = 0, aead = 0;
1399 unsigned int size_num = OSSL_NELEM(lengths_list);
1400 unsigned int i, k, loop, loopargs_len = 0, async_jobs = 0;
1406 #if !defined(OPENSSL_NO_RSA) || !defined(OPENSSL_NO_DSA) \
1407 || !defined(OPENSSL_NO_EC)
1410 openssl_speed_sec_t seconds = { SECONDS, RSA_SECONDS, DSA_SECONDS,
1411 ECDSA_SECONDS, ECDH_SECONDS,
1414 /* What follows are the buffers and key material. */
1415 #ifndef OPENSSL_NO_RC5
1418 #ifndef OPENSSL_NO_RC2
1421 #ifndef OPENSSL_NO_IDEA
1422 IDEA_KEY_SCHEDULE idea_ks;
1424 #ifndef OPENSSL_NO_SEED
1425 SEED_KEY_SCHEDULE seed_ks;
1427 #ifndef OPENSSL_NO_BF
1430 #ifndef OPENSSL_NO_CAST
1433 static const unsigned char key16[16] = {
1434 0x12, 0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0,
1435 0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12
1437 static const unsigned char key24[24] = {
1438 0x12, 0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0,
1439 0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12,
1440 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12, 0x34
1442 static const unsigned char key32[32] = {
1443 0x12, 0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0,
1444 0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12,
1445 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12, 0x34,
1446 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12, 0x34, 0x56
1448 #ifndef OPENSSL_NO_CAMELLIA
1449 static const unsigned char ckey24[24] = {
1450 0x12, 0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0,
1451 0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12,
1452 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12, 0x34
1454 static const unsigned char ckey32[32] = {
1455 0x12, 0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0,
1456 0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12,
1457 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12, 0x34,
1458 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12, 0x34, 0x56
1460 CAMELLIA_KEY camellia_ks1, camellia_ks2, camellia_ks3;
1462 #ifndef OPENSSL_NO_DES
1463 static DES_cblock key = {
1464 0x12, 0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0
1466 static DES_cblock key2 = {
1467 0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12
1469 static DES_cblock key3 = {
1470 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12, 0x34
1473 #ifndef OPENSSL_NO_RSA
1474 static const unsigned int rsa_bits[RSA_NUM] = {
1475 512, 1024, 2048, 3072, 4096, 7680, 15360
1477 static const unsigned char *rsa_data[RSA_NUM] = {
1478 test512, test1024, test2048, test3072, test4096, test7680, test15360
1480 static const int rsa_data_length[RSA_NUM] = {
1481 sizeof(test512), sizeof(test1024),
1482 sizeof(test2048), sizeof(test3072),
1483 sizeof(test4096), sizeof(test7680),
1486 int rsa_doit[RSA_NUM] = { 0 };
1487 int primes = RSA_DEFAULT_PRIME_NUM;
1489 #ifndef OPENSSL_NO_DSA
1490 static const unsigned int dsa_bits[DSA_NUM] = { 512, 1024, 2048 };
1491 int dsa_doit[DSA_NUM] = { 0 };
1493 #ifndef OPENSSL_NO_EC
1495 * We only test over the following curves as they are representative, To
1496 * add tests over more curves, simply add the curve NID and curve name to
1497 * the following arrays and increase the |ecdh_choices| list accordingly.
1499 static const struct {
1505 {"secp160r1", NID_secp160r1, 160},
1506 {"nistp192", NID_X9_62_prime192v1, 192},
1507 {"nistp224", NID_secp224r1, 224},
1508 {"nistp256", NID_X9_62_prime256v1, 256},
1509 {"nistp384", NID_secp384r1, 384},
1510 {"nistp521", NID_secp521r1, 521},
1511 # ifndef OPENSSL_NO_EC2M
1513 {"nistk163", NID_sect163k1, 163},
1514 {"nistk233", NID_sect233k1, 233},
1515 {"nistk283", NID_sect283k1, 283},
1516 {"nistk409", NID_sect409k1, 409},
1517 {"nistk571", NID_sect571k1, 571},
1518 {"nistb163", NID_sect163r2, 163},
1519 {"nistb233", NID_sect233r1, 233},
1520 {"nistb283", NID_sect283r1, 283},
1521 {"nistb409", NID_sect409r1, 409},
1522 {"nistb571", NID_sect571r1, 571},
1524 {"brainpoolP256r1", NID_brainpoolP256r1, 256},
1525 {"brainpoolP256t1", NID_brainpoolP256t1, 256},
1526 {"brainpoolP384r1", NID_brainpoolP384r1, 384},
1527 {"brainpoolP384t1", NID_brainpoolP384t1, 384},
1528 {"brainpoolP512r1", NID_brainpoolP512r1, 512},
1529 {"brainpoolP512t1", NID_brainpoolP512t1, 512},
1530 /* Other and ECDH only ones */
1531 {"X25519", NID_X25519, 253},
1532 {"X448", NID_X448, 448}
1534 static const struct {
1539 } test_ed_curves[] = {
1541 {"Ed25519", NID_ED25519, 253, 64},
1542 {"Ed448", NID_ED448, 456, 114}
1544 int ecdsa_doit[ECDSA_NUM] = { 0 };
1545 int ecdh_doit[EC_NUM] = { 0 };
1546 int eddsa_doit[EdDSA_NUM] = { 0 };
1547 OPENSSL_assert(OSSL_NELEM(test_curves) >= EC_NUM);
1548 OPENSSL_assert(OSSL_NELEM(test_ed_curves) >= EdDSA_NUM);
1549 #endif /* ndef OPENSSL_NO_EC */
1551 prog = opt_init(argc, argv, speed_options);
1552 while ((o = opt_next()) != OPT_EOF) {
1557 BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
1560 opt_help(speed_options);
1568 evp_cipher = EVP_get_cipherbyname(opt_arg());
1569 if (evp_cipher == NULL)
1570 evp_md = EVP_get_digestbyname(opt_arg());
1571 if (evp_cipher == NULL && evp_md == NULL) {
1573 "%s: %s is an unknown cipher or digest\n",
1584 * In a forked execution, an engine might need to be
1585 * initialised by each child process, not by the parent.
1586 * So store the name here and run setup_engine() later on.
1588 engine_id = opt_arg();
1592 multi = atoi(opt_arg());
1593 if (multi >= INT_MAX / (int)sizeof(int)) {
1594 BIO_printf(bio_err, "%s: multi argument too large\n", prog);
1600 #ifndef OPENSSL_NO_ASYNC
1601 async_jobs = atoi(opt_arg());
1602 if (!ASYNC_is_capable()) {
1604 "%s: async_jobs specified but async not supported\n",
1608 if (async_jobs > 99999) {
1609 BIO_printf(bio_err, "%s: too many async_jobs\n", prog);
1615 if (!opt_int(opt_arg(), &misalign))
1617 if (misalign > MISALIGN) {
1619 "%s: Maximum offset is %d\n", prog, MISALIGN);
1628 #ifdef OPENSSL_NO_MULTIBLOCK
1630 "%s: -mb specified but multi-block support is disabled\n",
1640 if (!opt_int(opt_arg(), &primes))
1644 seconds.sym = seconds.rsa = seconds.dsa = seconds.ecdsa
1645 = seconds.ecdh = seconds.eddsa = atoi(opt_arg());
1648 lengths_single = atoi(opt_arg());
1649 lengths = &lengths_single;
1657 argc = opt_num_rest();
1660 /* Remaining arguments are algorithms. */
1661 for (; *argv; argv++) {
1662 if (found(*argv, doit_choices, &i)) {
1666 #ifndef OPENSSL_NO_DES
1667 if (strcmp(*argv, "des") == 0) {
1668 doit[D_CBC_DES] = doit[D_EDE3_DES] = 1;
1672 if (strcmp(*argv, "sha") == 0) {
1673 doit[D_SHA1] = doit[D_SHA256] = doit[D_SHA512] = 1;
1676 #ifndef OPENSSL_NO_RSA
1677 if (strcmp(*argv, "openssl") == 0)
1679 if (strcmp(*argv, "rsa") == 0) {
1680 for (loop = 0; loop < OSSL_NELEM(rsa_doit); loop++)
1684 if (found(*argv, rsa_choices, &i)) {
1689 #ifndef OPENSSL_NO_DSA
1690 if (strcmp(*argv, "dsa") == 0) {
1691 dsa_doit[R_DSA_512] = dsa_doit[R_DSA_1024] =
1692 dsa_doit[R_DSA_2048] = 1;
1695 if (found(*argv, dsa_choices, &i)) {
1700 if (strcmp(*argv, "aes") == 0) {
1701 doit[D_CBC_128_AES] = doit[D_CBC_192_AES] = doit[D_CBC_256_AES] = 1;
1704 #ifndef OPENSSL_NO_CAMELLIA
1705 if (strcmp(*argv, "camellia") == 0) {
1706 doit[D_CBC_128_CML] = doit[D_CBC_192_CML] = doit[D_CBC_256_CML] = 1;
1710 #ifndef OPENSSL_NO_EC
1711 if (strcmp(*argv, "ecdsa") == 0) {
1712 for (loop = 0; loop < OSSL_NELEM(ecdsa_doit); loop++)
1713 ecdsa_doit[loop] = 1;
1716 if (found(*argv, ecdsa_choices, &i)) {
1720 if (strcmp(*argv, "ecdh") == 0) {
1721 for (loop = 0; loop < OSSL_NELEM(ecdh_doit); loop++)
1722 ecdh_doit[loop] = 1;
1725 if (found(*argv, ecdh_choices, &i)) {
1729 if (strcmp(*argv, "eddsa") == 0) {
1730 for (loop = 0; loop < OSSL_NELEM(eddsa_doit); loop++)
1731 eddsa_doit[loop] = 1;
1734 if (found(*argv, eddsa_choices, &i)) {
1739 BIO_printf(bio_err, "%s: Unknown algorithm %s\n", prog, *argv);
1745 if (evp_cipher == NULL) {
1746 BIO_printf(bio_err, "-aead can be used only with an AEAD cipher\n");
1748 } else if (!(EVP_CIPHER_flags(evp_cipher) &
1749 EVP_CIPH_FLAG_AEAD_CIPHER)) {
1750 BIO_printf(bio_err, "%s is not an AEAD cipher\n",
1751 OBJ_nid2ln(EVP_CIPHER_nid(evp_cipher)));
1756 if (evp_cipher == NULL) {
1757 BIO_printf(bio_err,"-mb can be used only with a multi-block"
1758 " capable cipher\n");
1760 } else if (!(EVP_CIPHER_flags(evp_cipher) &
1761 EVP_CIPH_FLAG_TLS1_1_MULTIBLOCK)) {
1762 BIO_printf(bio_err, "%s is not a multi-block capable\n",
1763 OBJ_nid2ln(EVP_CIPHER_nid(evp_cipher)));
1765 } else if (async_jobs > 0) {
1766 BIO_printf(bio_err, "Async mode is not supported with -mb");
1771 /* Initialize the job pool if async mode is enabled */
1772 if (async_jobs > 0) {
1773 async_init = ASYNC_init_thread(async_jobs, async_jobs);
1775 BIO_printf(bio_err, "Error creating the ASYNC job pool\n");
1780 loopargs_len = (async_jobs == 0 ? 1 : async_jobs);
1782 app_malloc(loopargs_len * sizeof(loopargs_t), "array of loopargs");
1783 memset(loopargs, 0, loopargs_len * sizeof(loopargs_t));
1785 for (i = 0; i < loopargs_len; i++) {
1786 if (async_jobs > 0) {
1787 loopargs[i].wait_ctx = ASYNC_WAIT_CTX_new();
1788 if (loopargs[i].wait_ctx == NULL) {
1789 BIO_printf(bio_err, "Error creating the ASYNC_WAIT_CTX\n");
1794 buflen = lengths[size_num - 1];
1795 if (buflen < 36) /* size of random vector in RSA benchmark */
1797 buflen += MAX_MISALIGNMENT + 1;
1798 loopargs[i].buf_malloc = app_malloc(buflen, "input buffer");
1799 loopargs[i].buf2_malloc = app_malloc(buflen, "input buffer");
1800 memset(loopargs[i].buf_malloc, 0, buflen);
1801 memset(loopargs[i].buf2_malloc, 0, buflen);
1803 /* Align the start of buffers on a 64 byte boundary */
1804 loopargs[i].buf = loopargs[i].buf_malloc + misalign;
1805 loopargs[i].buf2 = loopargs[i].buf2_malloc + misalign;
1806 #ifndef OPENSSL_NO_EC
1807 loopargs[i].secret_a = app_malloc(MAX_ECDH_SIZE, "ECDH secret a");
1808 loopargs[i].secret_b = app_malloc(MAX_ECDH_SIZE, "ECDH secret b");
1813 if (multi && do_multi(multi, size_num))
1817 /* Initialize the engine after the fork */
1818 e = setup_engine(engine_id, 0);
1820 /* No parameters; turn on everything. */
1821 if ((argc == 0) && !doit[D_EVP]) {
1822 for (i = 0; i < ALGOR_NUM; i++)
1825 #ifndef OPENSSL_NO_RSA
1826 for (i = 0; i < RSA_NUM; i++)
1829 #ifndef OPENSSL_NO_DSA
1830 for (i = 0; i < DSA_NUM; i++)
1833 #ifndef OPENSSL_NO_EC
1834 for (loop = 0; loop < OSSL_NELEM(ecdsa_doit); loop++)
1835 ecdsa_doit[loop] = 1;
1836 for (loop = 0; loop < OSSL_NELEM(ecdh_doit); loop++)
1837 ecdh_doit[loop] = 1;
1838 for (loop = 0; loop < OSSL_NELEM(eddsa_doit); loop++)
1839 eddsa_doit[loop] = 1;
1842 for (i = 0; i < ALGOR_NUM; i++)
1846 if (usertime == 0 && !mr)
1848 "You have chosen to measure elapsed time "
1849 "instead of user CPU time.\n");
1851 #ifndef OPENSSL_NO_RSA
1852 for (i = 0; i < loopargs_len; i++) {
1853 if (primes > RSA_DEFAULT_PRIME_NUM) {
1854 /* for multi-prime RSA, skip this */
1857 for (k = 0; k < RSA_NUM; k++) {
1858 const unsigned char *p;
1861 loopargs[i].rsa_key[k] =
1862 d2i_RSAPrivateKey(NULL, &p, rsa_data_length[k]);
1863 if (loopargs[i].rsa_key[k] == NULL) {
1865 "internal error loading RSA key number %d\n", k);
1871 #ifndef OPENSSL_NO_DSA
1872 for (i = 0; i < loopargs_len; i++) {
1873 loopargs[i].dsa_key[0] = get_dsa(512);
1874 loopargs[i].dsa_key[1] = get_dsa(1024);
1875 loopargs[i].dsa_key[2] = get_dsa(2048);
1878 #ifndef OPENSSL_NO_DES
1879 DES_set_key_unchecked(&key, &sch);
1880 DES_set_key_unchecked(&key2, &sch2);
1881 DES_set_key_unchecked(&key3, &sch3);
1883 AES_set_encrypt_key(key16, 128, &aes_ks1);
1884 AES_set_encrypt_key(key24, 192, &aes_ks2);
1885 AES_set_encrypt_key(key32, 256, &aes_ks3);
1886 #ifndef OPENSSL_NO_CAMELLIA
1887 Camellia_set_key(key16, 128, &camellia_ks1);
1888 Camellia_set_key(ckey24, 192, &camellia_ks2);
1889 Camellia_set_key(ckey32, 256, &camellia_ks3);
1891 #ifndef OPENSSL_NO_IDEA
1892 IDEA_set_encrypt_key(key16, &idea_ks);
1894 #ifndef OPENSSL_NO_SEED
1895 SEED_set_key(key16, &seed_ks);
1897 #ifndef OPENSSL_NO_RC4
1898 RC4_set_key(&rc4_ks, 16, key16);
1900 #ifndef OPENSSL_NO_RC2
1901 RC2_set_key(&rc2_ks, 16, key16, 128);
1903 #ifndef OPENSSL_NO_RC5
1904 RC5_32_set_key(&rc5_ks, 16, key16, 12);
1906 #ifndef OPENSSL_NO_BF
1907 BF_set_key(&bf_ks, 16, key16);
1909 #ifndef OPENSSL_NO_CAST
1910 CAST_set_key(&cast_ks, 16, key16);
1913 # ifndef OPENSSL_NO_DES
1914 BIO_printf(bio_err, "First we calculate the approximate speed ...\n");
1920 for (it = count; it; it--)
1921 DES_ecb_encrypt((DES_cblock *)loopargs[0].buf,
1922 (DES_cblock *)loopargs[0].buf, &sch, DES_ENCRYPT);
1926 c[D_MD2][0] = count / 10;
1927 c[D_MDC2][0] = count / 10;
1928 c[D_MD4][0] = count;
1929 c[D_MD5][0] = count;
1930 c[D_HMAC][0] = count;
1931 c[D_SHA1][0] = count;
1932 c[D_RMD160][0] = count;
1933 c[D_RC4][0] = count * 5;
1934 c[D_CBC_DES][0] = count;
1935 c[D_EDE3_DES][0] = count / 3;
1936 c[D_CBC_IDEA][0] = count;
1937 c[D_CBC_SEED][0] = count;
1938 c[D_CBC_RC2][0] = count;
1939 c[D_CBC_RC5][0] = count;
1940 c[D_CBC_BF][0] = count;
1941 c[D_CBC_CAST][0] = count;
1942 c[D_CBC_128_AES][0] = count;
1943 c[D_CBC_192_AES][0] = count;
1944 c[D_CBC_256_AES][0] = count;
1945 c[D_CBC_128_CML][0] = count;
1946 c[D_CBC_192_CML][0] = count;
1947 c[D_CBC_256_CML][0] = count;
1948 c[D_SHA256][0] = count;
1949 c[D_SHA512][0] = count;
1950 c[D_WHIRLPOOL][0] = count;
1951 c[D_IGE_128_AES][0] = count;
1952 c[D_IGE_192_AES][0] = count;
1953 c[D_IGE_256_AES][0] = count;
1954 c[D_GHASH][0] = count;
1955 c[D_RAND][0] = count;
1957 for (i = 1; i < size_num; i++) {
1960 l0 = (long)lengths[0];
1961 l1 = (long)lengths[i];
1963 c[D_MD2][i] = c[D_MD2][0] * 4 * l0 / l1;
1964 c[D_MDC2][i] = c[D_MDC2][0] * 4 * l0 / l1;
1965 c[D_MD4][i] = c[D_MD4][0] * 4 * l0 / l1;
1966 c[D_MD5][i] = c[D_MD5][0] * 4 * l0 / l1;
1967 c[D_HMAC][i] = c[D_HMAC][0] * 4 * l0 / l1;
1968 c[D_SHA1][i] = c[D_SHA1][0] * 4 * l0 / l1;
1969 c[D_RMD160][i] = c[D_RMD160][0] * 4 * l0 / l1;
1970 c[D_SHA256][i] = c[D_SHA256][0] * 4 * l0 / l1;
1971 c[D_SHA512][i] = c[D_SHA512][0] * 4 * l0 / l1;
1972 c[D_WHIRLPOOL][i] = c[D_WHIRLPOOL][0] * 4 * l0 / l1;
1973 c[D_GHASH][i] = c[D_GHASH][0] * 4 * l0 / l1;
1974 c[D_RAND][i] = c[D_RAND][0] * 4 * l0 / l1;
1976 l0 = (long)lengths[i - 1];
1978 c[D_RC4][i] = c[D_RC4][i - 1] * l0 / l1;
1979 c[D_CBC_DES][i] = c[D_CBC_DES][i - 1] * l0 / l1;
1980 c[D_EDE3_DES][i] = c[D_EDE3_DES][i - 1] * l0 / l1;
1981 c[D_CBC_IDEA][i] = c[D_CBC_IDEA][i - 1] * l0 / l1;
1982 c[D_CBC_SEED][i] = c[D_CBC_SEED][i - 1] * l0 / l1;
1983 c[D_CBC_RC2][i] = c[D_CBC_RC2][i - 1] * l0 / l1;
1984 c[D_CBC_RC5][i] = c[D_CBC_RC5][i - 1] * l0 / l1;
1985 c[D_CBC_BF][i] = c[D_CBC_BF][i - 1] * l0 / l1;
1986 c[D_CBC_CAST][i] = c[D_CBC_CAST][i - 1] * l0 / l1;
1987 c[D_CBC_128_AES][i] = c[D_CBC_128_AES][i - 1] * l0 / l1;
1988 c[D_CBC_192_AES][i] = c[D_CBC_192_AES][i - 1] * l0 / l1;
1989 c[D_CBC_256_AES][i] = c[D_CBC_256_AES][i - 1] * l0 / l1;
1990 c[D_CBC_128_CML][i] = c[D_CBC_128_CML][i - 1] * l0 / l1;
1991 c[D_CBC_192_CML][i] = c[D_CBC_192_CML][i - 1] * l0 / l1;
1992 c[D_CBC_256_CML][i] = c[D_CBC_256_CML][i - 1] * l0 / l1;
1993 c[D_IGE_128_AES][i] = c[D_IGE_128_AES][i - 1] * l0 / l1;
1994 c[D_IGE_192_AES][i] = c[D_IGE_192_AES][i - 1] * l0 / l1;
1995 c[D_IGE_256_AES][i] = c[D_IGE_256_AES][i - 1] * l0 / l1;
1998 # ifndef OPENSSL_NO_RSA
1999 rsa_c[R_RSA_512][0] = count / 2000;
2000 rsa_c[R_RSA_512][1] = count / 400;
2001 for (i = 1; i < RSA_NUM; i++) {
2002 rsa_c[i][0] = rsa_c[i - 1][0] / 8;
2003 rsa_c[i][1] = rsa_c[i - 1][1] / 4;
2004 if (rsa_doit[i] <= 1 && rsa_c[i][0] == 0)
2007 if (rsa_c[i][0] == 0) {
2008 rsa_c[i][0] = 1; /* Set minimum iteration Nb to 1. */
2015 # ifndef OPENSSL_NO_DSA
2016 dsa_c[R_DSA_512][0] = count / 1000;
2017 dsa_c[R_DSA_512][1] = count / 1000 / 2;
2018 for (i = 1; i < DSA_NUM; i++) {
2019 dsa_c[i][0] = dsa_c[i - 1][0] / 4;
2020 dsa_c[i][1] = dsa_c[i - 1][1] / 4;
2021 if (dsa_doit[i] <= 1 && dsa_c[i][0] == 0)
2024 if (dsa_c[i][0] == 0) {
2025 dsa_c[i][0] = 1; /* Set minimum iteration Nb to 1. */
2032 # ifndef OPENSSL_NO_EC
2033 ecdsa_c[R_EC_P160][0] = count / 1000;
2034 ecdsa_c[R_EC_P160][1] = count / 1000 / 2;
2035 for (i = R_EC_P192; i <= R_EC_P521; i++) {
2036 ecdsa_c[i][0] = ecdsa_c[i - 1][0] / 2;
2037 ecdsa_c[i][1] = ecdsa_c[i - 1][1] / 2;
2038 if (ecdsa_doit[i] <= 1 && ecdsa_c[i][0] == 0)
2041 if (ecdsa_c[i][0] == 0) {
2047 # ifndef OPENSSL_NO_EC2M
2048 ecdsa_c[R_EC_K163][0] = count / 1000;
2049 ecdsa_c[R_EC_K163][1] = count / 1000 / 2;
2050 for (i = R_EC_K233; i <= R_EC_K571; i++) {
2051 ecdsa_c[i][0] = ecdsa_c[i - 1][0] / 2;
2052 ecdsa_c[i][1] = ecdsa_c[i - 1][1] / 2;
2053 if (ecdsa_doit[i] <= 1 && ecdsa_c[i][0] == 0)
2056 if (ecdsa_c[i][0] == 0) {
2062 ecdsa_c[R_EC_B163][0] = count / 1000;
2063 ecdsa_c[R_EC_B163][1] = count / 1000 / 2;
2064 for (i = R_EC_B233; i <= R_EC_B571; i++) {
2065 ecdsa_c[i][0] = ecdsa_c[i - 1][0] / 2;
2066 ecdsa_c[i][1] = ecdsa_c[i - 1][1] / 2;
2067 if (ecdsa_doit[i] <= 1 && ecdsa_c[i][0] == 0)
2070 if (ecdsa_c[i][0] == 0) {
2078 ecdh_c[R_EC_P160][0] = count / 1000;
2079 for (i = R_EC_P192; i <= R_EC_P521; i++) {
2080 ecdh_c[i][0] = ecdh_c[i - 1][0] / 2;
2081 if (ecdh_doit[i] <= 1 && ecdh_c[i][0] == 0)
2084 if (ecdh_c[i][0] == 0) {
2089 # ifndef OPENSSL_NO_EC2M
2090 ecdh_c[R_EC_K163][0] = count / 1000;
2091 for (i = R_EC_K233; i <= R_EC_K571; i++) {
2092 ecdh_c[i][0] = ecdh_c[i - 1][0] / 2;
2093 if (ecdh_doit[i] <= 1 && ecdh_c[i][0] == 0)
2096 if (ecdh_c[i][0] == 0) {
2101 ecdh_c[R_EC_B163][0] = count / 1000;
2102 for (i = R_EC_B233; i <= R_EC_B571; i++) {
2103 ecdh_c[i][0] = ecdh_c[i - 1][0] / 2;
2104 if (ecdh_doit[i] <= 1 && ecdh_c[i][0] == 0)
2107 if (ecdh_c[i][0] == 0) {
2113 /* repeated code good to factorize */
2114 ecdh_c[R_EC_BRP256R1][0] = count / 1000;
2115 for (i = R_EC_BRP384R1; i <= R_EC_BRP512R1; i += 2) {
2116 ecdh_c[i][0] = ecdh_c[i - 2][0] / 2;
2117 if (ecdh_doit[i] <= 1 && ecdh_c[i][0] == 0)
2120 if (ecdh_c[i][0] == 0) {
2125 ecdh_c[R_EC_BRP256T1][0] = count / 1000;
2126 for (i = R_EC_BRP384T1; i <= R_EC_BRP512T1; i += 2) {
2127 ecdh_c[i][0] = ecdh_c[i - 2][0] / 2;
2128 if (ecdh_doit[i] <= 1 && ecdh_c[i][0] == 0)
2131 if (ecdh_c[i][0] == 0) {
2136 /* default iteration count for the last two EC Curves */
2137 ecdh_c[R_EC_X25519][0] = count / 1800;
2138 ecdh_c[R_EC_X448][0] = count / 7200;
2140 eddsa_c[R_EC_Ed25519][0] = count / 1800;
2141 eddsa_c[R_EC_Ed448][0] = count / 7200;
2145 /* not worth fixing */
2146 # error "You cannot disable DES on systems without SIGALRM."
2147 # endif /* OPENSSL_NO_DES */
2149 signal(SIGALRM, alarmed);
2150 #endif /* SIGALRM */
2152 #ifndef OPENSSL_NO_MD2
2154 for (testnum = 0; testnum < size_num; testnum++) {
2155 print_message(names[D_MD2], c[D_MD2][testnum], lengths[testnum],
2158 count = run_benchmark(async_jobs, EVP_Digest_MD2_loop, loopargs);
2160 print_result(D_MD2, testnum, count, d);
2164 #ifndef OPENSSL_NO_MDC2
2166 for (testnum = 0; testnum < size_num; testnum++) {
2167 print_message(names[D_MDC2], c[D_MDC2][testnum], lengths[testnum],
2170 count = run_benchmark(async_jobs, EVP_Digest_MDC2_loop, loopargs);
2172 print_result(D_MDC2, testnum, count, d);
2177 #ifndef OPENSSL_NO_MD4
2179 for (testnum = 0; testnum < size_num; testnum++) {
2180 print_message(names[D_MD4], c[D_MD4][testnum], lengths[testnum],
2183 count = run_benchmark(async_jobs, EVP_Digest_MD4_loop, loopargs);
2185 print_result(D_MD4, testnum, count, d);
2190 #ifndef OPENSSL_NO_MD5
2192 for (testnum = 0; testnum < size_num; testnum++) {
2193 print_message(names[D_MD5], c[D_MD5][testnum], lengths[testnum],
2196 count = run_benchmark(async_jobs, MD5_loop, loopargs);
2198 print_result(D_MD5, testnum, count, d);
2203 static const char hmac_key[] = "This is a key...";
2204 int len = strlen(hmac_key);
2206 for (i = 0; i < loopargs_len; i++) {
2207 loopargs[i].hctx = HMAC_CTX_new();
2208 if (loopargs[i].hctx == NULL) {
2209 BIO_printf(bio_err, "HMAC malloc failure, exiting...");
2213 HMAC_Init_ex(loopargs[i].hctx, hmac_key, len, EVP_md5(), NULL);
2215 for (testnum = 0; testnum < size_num; testnum++) {
2216 print_message(names[D_HMAC], c[D_HMAC][testnum], lengths[testnum],
2219 count = run_benchmark(async_jobs, HMAC_loop, loopargs);
2221 print_result(D_HMAC, testnum, count, d);
2223 for (i = 0; i < loopargs_len; i++) {
2224 HMAC_CTX_free(loopargs[i].hctx);
2229 for (testnum = 0; testnum < size_num; testnum++) {
2230 print_message(names[D_SHA1], c[D_SHA1][testnum], lengths[testnum],
2233 count = run_benchmark(async_jobs, SHA1_loop, loopargs);
2235 print_result(D_SHA1, testnum, count, d);
2238 if (doit[D_SHA256]) {
2239 for (testnum = 0; testnum < size_num; testnum++) {
2240 print_message(names[D_SHA256], c[D_SHA256][testnum],
2241 lengths[testnum], seconds.sym);
2243 count = run_benchmark(async_jobs, SHA256_loop, loopargs);
2245 print_result(D_SHA256, testnum, count, d);
2248 if (doit[D_SHA512]) {
2249 for (testnum = 0; testnum < size_num; testnum++) {
2250 print_message(names[D_SHA512], c[D_SHA512][testnum],
2251 lengths[testnum], seconds.sym);
2253 count = run_benchmark(async_jobs, SHA512_loop, loopargs);
2255 print_result(D_SHA512, testnum, count, d);
2258 #ifndef OPENSSL_NO_WHIRLPOOL
2259 if (doit[D_WHIRLPOOL]) {
2260 for (testnum = 0; testnum < size_num; testnum++) {
2261 print_message(names[D_WHIRLPOOL], c[D_WHIRLPOOL][testnum],
2262 lengths[testnum], seconds.sym);
2264 count = run_benchmark(async_jobs, WHIRLPOOL_loop, loopargs);
2266 print_result(D_WHIRLPOOL, testnum, count, d);
2271 #ifndef OPENSSL_NO_RMD160
2272 if (doit[D_RMD160]) {
2273 for (testnum = 0; testnum < size_num; testnum++) {
2274 print_message(names[D_RMD160], c[D_RMD160][testnum],
2275 lengths[testnum], seconds.sym);
2277 count = run_benchmark(async_jobs, EVP_Digest_RMD160_loop, loopargs);
2279 print_result(D_RMD160, testnum, count, d);
2283 #ifndef OPENSSL_NO_RC4
2285 for (testnum = 0; testnum < size_num; testnum++) {
2286 print_message(names[D_RC4], c[D_RC4][testnum], lengths[testnum],
2289 count = run_benchmark(async_jobs, RC4_loop, loopargs);
2291 print_result(D_RC4, testnum, count, d);
2295 #ifndef OPENSSL_NO_DES
2296 if (doit[D_CBC_DES]) {
2297 for (testnum = 0; testnum < size_num; testnum++) {
2298 print_message(names[D_CBC_DES], c[D_CBC_DES][testnum],
2299 lengths[testnum], seconds.sym);
2301 count = run_benchmark(async_jobs, DES_ncbc_encrypt_loop, loopargs);
2303 print_result(D_CBC_DES, testnum, count, d);
2307 if (doit[D_EDE3_DES]) {
2308 for (testnum = 0; testnum < size_num; testnum++) {
2309 print_message(names[D_EDE3_DES], c[D_EDE3_DES][testnum],
2310 lengths[testnum], seconds.sym);
2313 run_benchmark(async_jobs, DES_ede3_cbc_encrypt_loop, loopargs);
2315 print_result(D_EDE3_DES, testnum, count, d);
2320 if (doit[D_CBC_128_AES]) {
2321 for (testnum = 0; testnum < size_num; testnum++) {
2322 print_message(names[D_CBC_128_AES], c[D_CBC_128_AES][testnum],
2323 lengths[testnum], seconds.sym);
2326 run_benchmark(async_jobs, AES_cbc_128_encrypt_loop, loopargs);
2328 print_result(D_CBC_128_AES, testnum, count, d);
2331 if (doit[D_CBC_192_AES]) {
2332 for (testnum = 0; testnum < size_num; testnum++) {
2333 print_message(names[D_CBC_192_AES], c[D_CBC_192_AES][testnum],
2334 lengths[testnum], seconds.sym);
2337 run_benchmark(async_jobs, AES_cbc_192_encrypt_loop, loopargs);
2339 print_result(D_CBC_192_AES, testnum, count, d);
2342 if (doit[D_CBC_256_AES]) {
2343 for (testnum = 0; testnum < size_num; testnum++) {
2344 print_message(names[D_CBC_256_AES], c[D_CBC_256_AES][testnum],
2345 lengths[testnum], seconds.sym);
2348 run_benchmark(async_jobs, AES_cbc_256_encrypt_loop, loopargs);
2350 print_result(D_CBC_256_AES, testnum, count, d);
2354 if (doit[D_IGE_128_AES]) {
2355 for (testnum = 0; testnum < size_num; testnum++) {
2356 print_message(names[D_IGE_128_AES], c[D_IGE_128_AES][testnum],
2357 lengths[testnum], seconds.sym);
2360 run_benchmark(async_jobs, AES_ige_128_encrypt_loop, loopargs);
2362 print_result(D_IGE_128_AES, testnum, count, d);
2365 if (doit[D_IGE_192_AES]) {
2366 for (testnum = 0; testnum < size_num; testnum++) {
2367 print_message(names[D_IGE_192_AES], c[D_IGE_192_AES][testnum],
2368 lengths[testnum], seconds.sym);
2371 run_benchmark(async_jobs, AES_ige_192_encrypt_loop, loopargs);
2373 print_result(D_IGE_192_AES, testnum, count, d);
2376 if (doit[D_IGE_256_AES]) {
2377 for (testnum = 0; testnum < size_num; testnum++) {
2378 print_message(names[D_IGE_256_AES], c[D_IGE_256_AES][testnum],
2379 lengths[testnum], seconds.sym);
2382 run_benchmark(async_jobs, AES_ige_256_encrypt_loop, loopargs);
2384 print_result(D_IGE_256_AES, testnum, count, d);
2387 if (doit[D_GHASH]) {
2388 for (i = 0; i < loopargs_len; i++) {
2389 loopargs[i].gcm_ctx =
2390 CRYPTO_gcm128_new(&aes_ks1, (block128_f) AES_encrypt);
2391 CRYPTO_gcm128_setiv(loopargs[i].gcm_ctx,
2392 (unsigned char *)"0123456789ab", 12);
2395 for (testnum = 0; testnum < size_num; testnum++) {
2396 print_message(names[D_GHASH], c[D_GHASH][testnum],
2397 lengths[testnum], seconds.sym);
2399 count = run_benchmark(async_jobs, CRYPTO_gcm128_aad_loop, loopargs);
2401 print_result(D_GHASH, testnum, count, d);
2403 for (i = 0; i < loopargs_len; i++)
2404 CRYPTO_gcm128_release(loopargs[i].gcm_ctx);
2406 #ifndef OPENSSL_NO_CAMELLIA
2407 if (doit[D_CBC_128_CML]) {
2408 if (async_jobs > 0) {
2409 BIO_printf(bio_err, "Async mode is not supported with %s\n",
2410 names[D_CBC_128_CML]);
2411 doit[D_CBC_128_CML] = 0;
2413 for (testnum = 0; testnum < size_num && async_init == 0; testnum++) {
2414 print_message(names[D_CBC_128_CML], c[D_CBC_128_CML][testnum],
2415 lengths[testnum], seconds.sym);
2417 for (count = 0; COND(c[D_CBC_128_CML][testnum]); count++)
2418 Camellia_cbc_encrypt(loopargs[0].buf, loopargs[0].buf,
2419 (size_t)lengths[testnum], &camellia_ks1,
2420 iv, CAMELLIA_ENCRYPT);
2422 print_result(D_CBC_128_CML, testnum, count, d);
2425 if (doit[D_CBC_192_CML]) {
2426 if (async_jobs > 0) {
2427 BIO_printf(bio_err, "Async mode is not supported with %s\n",
2428 names[D_CBC_192_CML]);
2429 doit[D_CBC_192_CML] = 0;
2431 for (testnum = 0; testnum < size_num && async_init == 0; testnum++) {
2432 print_message(names[D_CBC_192_CML], c[D_CBC_192_CML][testnum],
2433 lengths[testnum], seconds.sym);
2434 if (async_jobs > 0) {
2435 BIO_printf(bio_err, "Async mode is not supported, exiting...");
2439 for (count = 0; COND(c[D_CBC_192_CML][testnum]); count++)
2440 Camellia_cbc_encrypt(loopargs[0].buf, loopargs[0].buf,
2441 (size_t)lengths[testnum], &camellia_ks2,
2442 iv, CAMELLIA_ENCRYPT);
2444 print_result(D_CBC_192_CML, testnum, count, d);
2447 if (doit[D_CBC_256_CML]) {
2448 if (async_jobs > 0) {
2449 BIO_printf(bio_err, "Async mode is not supported with %s\n",
2450 names[D_CBC_256_CML]);
2451 doit[D_CBC_256_CML] = 0;
2453 for (testnum = 0; testnum < size_num && async_init == 0; testnum++) {
2454 print_message(names[D_CBC_256_CML], c[D_CBC_256_CML][testnum],
2455 lengths[testnum], seconds.sym);
2457 for (count = 0; COND(c[D_CBC_256_CML][testnum]); count++)
2458 Camellia_cbc_encrypt(loopargs[0].buf, loopargs[0].buf,
2459 (size_t)lengths[testnum], &camellia_ks3,
2460 iv, CAMELLIA_ENCRYPT);
2462 print_result(D_CBC_256_CML, testnum, count, d);
2466 #ifndef OPENSSL_NO_IDEA
2467 if (doit[D_CBC_IDEA]) {
2468 if (async_jobs > 0) {
2469 BIO_printf(bio_err, "Async mode is not supported with %s\n",
2471 doit[D_CBC_IDEA] = 0;
2473 for (testnum = 0; testnum < size_num && async_init == 0; testnum++) {
2474 print_message(names[D_CBC_IDEA], c[D_CBC_IDEA][testnum],
2475 lengths[testnum], seconds.sym);
2477 for (count = 0; COND(c[D_CBC_IDEA][testnum]); count++)
2478 IDEA_cbc_encrypt(loopargs[0].buf, loopargs[0].buf,
2479 (size_t)lengths[testnum], &idea_ks,
2482 print_result(D_CBC_IDEA, testnum, count, d);
2486 #ifndef OPENSSL_NO_SEED
2487 if (doit[D_CBC_SEED]) {
2488 if (async_jobs > 0) {
2489 BIO_printf(bio_err, "Async mode is not supported with %s\n",
2491 doit[D_CBC_SEED] = 0;
2493 for (testnum = 0; testnum < size_num && async_init == 0; testnum++) {
2494 print_message(names[D_CBC_SEED], c[D_CBC_SEED][testnum],
2495 lengths[testnum], seconds.sym);
2497 for (count = 0; COND(c[D_CBC_SEED][testnum]); count++)
2498 SEED_cbc_encrypt(loopargs[0].buf, loopargs[0].buf,
2499 (size_t)lengths[testnum], &seed_ks, iv, 1);
2501 print_result(D_CBC_SEED, testnum, count, d);
2505 #ifndef OPENSSL_NO_RC2
2506 if (doit[D_CBC_RC2]) {
2507 if (async_jobs > 0) {
2508 BIO_printf(bio_err, "Async mode is not supported with %s\n",
2510 doit[D_CBC_RC2] = 0;
2512 for (testnum = 0; testnum < size_num && async_init == 0; testnum++) {
2513 print_message(names[D_CBC_RC2], c[D_CBC_RC2][testnum],
2514 lengths[testnum], seconds.sym);
2515 if (async_jobs > 0) {
2516 BIO_printf(bio_err, "Async mode is not supported, exiting...");
2520 for (count = 0; COND(c[D_CBC_RC2][testnum]); count++)
2521 RC2_cbc_encrypt(loopargs[0].buf, loopargs[0].buf,
2522 (size_t)lengths[testnum], &rc2_ks,
2525 print_result(D_CBC_RC2, testnum, count, d);
2529 #ifndef OPENSSL_NO_RC5
2530 if (doit[D_CBC_RC5]) {
2531 if (async_jobs > 0) {
2532 BIO_printf(bio_err, "Async mode is not supported with %s\n",
2534 doit[D_CBC_RC5] = 0;
2536 for (testnum = 0; testnum < size_num && async_init == 0; testnum++) {
2537 print_message(names[D_CBC_RC5], c[D_CBC_RC5][testnum],
2538 lengths[testnum], seconds.sym);
2539 if (async_jobs > 0) {
2540 BIO_printf(bio_err, "Async mode is not supported, exiting...");
2544 for (count = 0; COND(c[D_CBC_RC5][testnum]); count++)
2545 RC5_32_cbc_encrypt(loopargs[0].buf, loopargs[0].buf,
2546 (size_t)lengths[testnum], &rc5_ks,
2549 print_result(D_CBC_RC5, testnum, count, d);
2553 #ifndef OPENSSL_NO_BF
2554 if (doit[D_CBC_BF]) {
2555 if (async_jobs > 0) {
2556 BIO_printf(bio_err, "Async mode is not supported with %s\n",
2560 for (testnum = 0; testnum < size_num && async_init == 0; testnum++) {
2561 print_message(names[D_CBC_BF], c[D_CBC_BF][testnum],
2562 lengths[testnum], seconds.sym);
2564 for (count = 0; COND(c[D_CBC_BF][testnum]); count++)
2565 BF_cbc_encrypt(loopargs[0].buf, loopargs[0].buf,
2566 (size_t)lengths[testnum], &bf_ks,
2569 print_result(D_CBC_BF, testnum, count, d);
2573 #ifndef OPENSSL_NO_CAST
2574 if (doit[D_CBC_CAST]) {
2575 if (async_jobs > 0) {
2576 BIO_printf(bio_err, "Async mode is not supported with %s\n",
2578 doit[D_CBC_CAST] = 0;
2580 for (testnum = 0; testnum < size_num && async_init == 0; testnum++) {
2581 print_message(names[D_CBC_CAST], c[D_CBC_CAST][testnum],
2582 lengths[testnum], seconds.sym);
2584 for (count = 0; COND(c[D_CBC_CAST][testnum]); count++)
2585 CAST_cbc_encrypt(loopargs[0].buf, loopargs[0].buf,
2586 (size_t)lengths[testnum], &cast_ks,
2589 print_result(D_CBC_CAST, testnum, count, d);
2594 for (testnum = 0; testnum < size_num; testnum++) {
2595 print_message(names[D_RAND], c[D_RAND][testnum], lengths[testnum],
2598 count = run_benchmark(async_jobs, RAND_bytes_loop, loopargs);
2600 print_result(D_RAND, testnum, count, d);
2605 if (evp_cipher != NULL) {
2606 int (*loopfunc)(void *args) = EVP_Update_loop;
2608 if (multiblock && (EVP_CIPHER_flags(evp_cipher) &
2609 EVP_CIPH_FLAG_TLS1_1_MULTIBLOCK)) {
2610 multiblock_speed(evp_cipher, lengths_single, &seconds);
2615 names[D_EVP] = OBJ_nid2ln(EVP_CIPHER_nid(evp_cipher));
2617 if (EVP_CIPHER_mode(evp_cipher) == EVP_CIPH_CCM_MODE) {
2618 loopfunc = EVP_Update_loop_ccm;
2619 } else if (aead && (EVP_CIPHER_flags(evp_cipher) &
2620 EVP_CIPH_FLAG_AEAD_CIPHER)) {
2621 loopfunc = EVP_Update_loop_aead;
2622 if (lengths == lengths_list) {
2623 lengths = aead_lengths_list;
2624 size_num = OSSL_NELEM(aead_lengths_list);
2628 for (testnum = 0; testnum < size_num; testnum++) {
2629 print_message(names[D_EVP], save_count, lengths[testnum],
2632 for (k = 0; k < loopargs_len; k++) {
2633 loopargs[k].ctx = EVP_CIPHER_CTX_new();
2634 if (loopargs[k].ctx == NULL) {
2635 BIO_printf(bio_err, "\nEVP_CIPHER_CTX_new failure\n");
2638 if (!EVP_CipherInit_ex(loopargs[k].ctx, evp_cipher, NULL,
2639 NULL, iv, decrypt ? 0 : 1)) {
2640 BIO_printf(bio_err, "\nEVP_CipherInit_ex failure\n");
2641 ERR_print_errors(bio_err);
2645 EVP_CIPHER_CTX_set_padding(loopargs[k].ctx, 0);
2647 keylen = EVP_CIPHER_CTX_key_length(loopargs[k].ctx);
2648 loopargs[k].key = app_malloc(keylen, "evp_cipher key");
2649 EVP_CIPHER_CTX_rand_key(loopargs[k].ctx, loopargs[k].key);
2650 if (!EVP_CipherInit_ex(loopargs[k].ctx, NULL, NULL,
2651 loopargs[k].key, NULL, -1)) {
2652 BIO_printf(bio_err, "\nEVP_CipherInit_ex failure\n");
2653 ERR_print_errors(bio_err);
2656 OPENSSL_clear_free(loopargs[k].key, keylen);
2660 count = run_benchmark(async_jobs, loopfunc, loopargs);
2662 for (k = 0; k < loopargs_len; k++) {
2663 EVP_CIPHER_CTX_free(loopargs[k].ctx);
2665 print_result(D_EVP, testnum, count, d);
2667 } else if (evp_md != NULL) {
2668 names[D_EVP] = OBJ_nid2ln(EVP_MD_type(evp_md));
2670 for (testnum = 0; testnum < size_num; testnum++) {
2671 print_message(names[D_EVP], save_count, lengths[testnum],
2674 count = run_benchmark(async_jobs, EVP_Digest_loop, loopargs);
2676 print_result(D_EVP, testnum, count, d);
2681 for (i = 0; i < loopargs_len; i++)
2682 if (RAND_bytes(loopargs[i].buf, 36) <= 0)
2685 #ifndef OPENSSL_NO_RSA
2686 for (testnum = 0; testnum < RSA_NUM; testnum++) {
2688 if (!rsa_doit[testnum])
2690 for (i = 0; i < loopargs_len; i++) {
2692 /* we haven't set keys yet, generate multi-prime RSA keys */
2693 BIGNUM *bn = BN_new();
2697 if (!BN_set_word(bn, RSA_F4)) {
2702 BIO_printf(bio_err, "Generate multi-prime RSA key for %s\n",
2703 rsa_choices[testnum].name);
2705 loopargs[i].rsa_key[testnum] = RSA_new();
2706 if (loopargs[i].rsa_key[testnum] == NULL) {
2711 if (!RSA_generate_multi_prime_key(loopargs[i].rsa_key[testnum],
2713 primes, bn, NULL)) {
2719 st = RSA_sign(NID_md5_sha1, loopargs[i].buf, 36, loopargs[i].buf2,
2720 &loopargs[i].siglen, loopargs[i].rsa_key[testnum]);
2726 "RSA sign failure. No RSA sign will be done.\n");
2727 ERR_print_errors(bio_err);
2730 pkey_print_message("private", "rsa",
2731 rsa_c[testnum][0], rsa_bits[testnum],
2733 /* RSA_blinding_on(rsa_key[testnum],NULL); */
2735 count = run_benchmark(async_jobs, RSA_sign_loop, loopargs);
2738 mr ? "+R1:%ld:%d:%.2f\n"
2739 : "%ld %u bits private RSA's in %.2fs\n",
2740 count, rsa_bits[testnum], d);
2741 rsa_results[testnum][0] = (double)count / d;
2745 for (i = 0; i < loopargs_len; i++) {
2746 st = RSA_verify(NID_md5_sha1, loopargs[i].buf, 36, loopargs[i].buf2,
2747 loopargs[i].siglen, loopargs[i].rsa_key[testnum]);
2753 "RSA verify failure. No RSA verify will be done.\n");
2754 ERR_print_errors(bio_err);
2755 rsa_doit[testnum] = 0;
2757 pkey_print_message("public", "rsa",
2758 rsa_c[testnum][1], rsa_bits[testnum],
2761 count = run_benchmark(async_jobs, RSA_verify_loop, loopargs);
2764 mr ? "+R2:%ld:%d:%.2f\n"
2765 : "%ld %u bits public RSA's in %.2fs\n",
2766 count, rsa_bits[testnum], d);
2767 rsa_results[testnum][1] = (double)count / d;
2770 if (rsa_count <= 1) {
2771 /* if longer than 10s, don't do any more */
2772 for (testnum++; testnum < RSA_NUM; testnum++)
2773 rsa_doit[testnum] = 0;
2776 #endif /* OPENSSL_NO_RSA */
2778 for (i = 0; i < loopargs_len; i++)
2779 if (RAND_bytes(loopargs[i].buf, 36) <= 0)
2782 #ifndef OPENSSL_NO_DSA
2783 for (testnum = 0; testnum < DSA_NUM; testnum++) {
2785 if (!dsa_doit[testnum])
2788 /* DSA_generate_key(dsa_key[testnum]); */
2789 /* DSA_sign_setup(dsa_key[testnum],NULL); */
2790 for (i = 0; i < loopargs_len; i++) {
2791 st = DSA_sign(0, loopargs[i].buf, 20, loopargs[i].buf2,
2792 &loopargs[i].siglen, loopargs[i].dsa_key[testnum]);
2798 "DSA sign failure. No DSA sign will be done.\n");
2799 ERR_print_errors(bio_err);
2802 pkey_print_message("sign", "dsa",
2803 dsa_c[testnum][0], dsa_bits[testnum],
2806 count = run_benchmark(async_jobs, DSA_sign_loop, loopargs);
2809 mr ? "+R3:%ld:%u:%.2f\n"
2810 : "%ld %u bits DSA signs in %.2fs\n",
2811 count, dsa_bits[testnum], d);
2812 dsa_results[testnum][0] = (double)count / d;
2816 for (i = 0; i < loopargs_len; i++) {
2817 st = DSA_verify(0, loopargs[i].buf, 20, loopargs[i].buf2,
2818 loopargs[i].siglen, loopargs[i].dsa_key[testnum]);
2824 "DSA verify failure. No DSA verify will be done.\n");
2825 ERR_print_errors(bio_err);
2826 dsa_doit[testnum] = 0;
2828 pkey_print_message("verify", "dsa",
2829 dsa_c[testnum][1], dsa_bits[testnum],
2832 count = run_benchmark(async_jobs, DSA_verify_loop, loopargs);
2835 mr ? "+R4:%ld:%u:%.2f\n"
2836 : "%ld %u bits DSA verify in %.2fs\n",
2837 count, dsa_bits[testnum], d);
2838 dsa_results[testnum][1] = (double)count / d;
2841 if (rsa_count <= 1) {
2842 /* if longer than 10s, don't do any more */
2843 for (testnum++; testnum < DSA_NUM; testnum++)
2844 dsa_doit[testnum] = 0;
2847 #endif /* OPENSSL_NO_DSA */
2849 #ifndef OPENSSL_NO_EC
2850 for (testnum = 0; testnum < ECDSA_NUM; testnum++) {
2853 if (!ecdsa_doit[testnum])
2854 continue; /* Ignore Curve */
2855 for (i = 0; i < loopargs_len; i++) {
2856 loopargs[i].ecdsa[testnum] =
2857 EC_KEY_new_by_curve_name(test_curves[testnum].nid);
2858 if (loopargs[i].ecdsa[testnum] == NULL) {
2864 BIO_printf(bio_err, "ECDSA failure.\n");
2865 ERR_print_errors(bio_err);
2868 for (i = 0; i < loopargs_len; i++) {
2869 EC_KEY_precompute_mult(loopargs[i].ecdsa[testnum], NULL);
2870 /* Perform ECDSA signature test */
2871 EC_KEY_generate_key(loopargs[i].ecdsa[testnum]);
2872 st = ECDSA_sign(0, loopargs[i].buf, 20, loopargs[i].buf2,
2873 &loopargs[i].siglen,
2874 loopargs[i].ecdsa[testnum]);
2880 "ECDSA sign failure. No ECDSA sign will be done.\n");
2881 ERR_print_errors(bio_err);
2884 pkey_print_message("sign", "ecdsa",
2885 ecdsa_c[testnum][0],
2886 test_curves[testnum].bits, seconds.ecdsa);
2888 count = run_benchmark(async_jobs, ECDSA_sign_loop, loopargs);
2892 mr ? "+R5:%ld:%u:%.2f\n" :
2893 "%ld %u bits ECDSA signs in %.2fs \n",
2894 count, test_curves[testnum].bits, d);
2895 ecdsa_results[testnum][0] = (double)count / d;
2899 /* Perform ECDSA verification test */
2900 for (i = 0; i < loopargs_len; i++) {
2901 st = ECDSA_verify(0, loopargs[i].buf, 20, loopargs[i].buf2,
2903 loopargs[i].ecdsa[testnum]);
2909 "ECDSA verify failure. No ECDSA verify will be done.\n");
2910 ERR_print_errors(bio_err);
2911 ecdsa_doit[testnum] = 0;
2913 pkey_print_message("verify", "ecdsa",
2914 ecdsa_c[testnum][1],
2915 test_curves[testnum].bits, seconds.ecdsa);
2917 count = run_benchmark(async_jobs, ECDSA_verify_loop, loopargs);
2920 mr ? "+R6:%ld:%u:%.2f\n"
2921 : "%ld %u bits ECDSA verify in %.2fs\n",
2922 count, test_curves[testnum].bits, d);
2923 ecdsa_results[testnum][1] = (double)count / d;
2926 if (rsa_count <= 1) {
2927 /* if longer than 10s, don't do any more */
2928 for (testnum++; testnum < ECDSA_NUM; testnum++)
2929 ecdsa_doit[testnum] = 0;
2934 for (testnum = 0; testnum < EC_NUM; testnum++) {
2935 int ecdh_checks = 1;
2937 if (!ecdh_doit[testnum])
2940 for (i = 0; i < loopargs_len; i++) {
2941 EVP_PKEY_CTX *kctx = NULL;
2942 EVP_PKEY_CTX *test_ctx = NULL;
2943 EVP_PKEY_CTX *ctx = NULL;
2944 EVP_PKEY *key_A = NULL;
2945 EVP_PKEY *key_B = NULL;
2949 /* Ensure that the error queue is empty */
2950 if (ERR_peek_error()) {
2952 "WARNING: the error queue contains previous unhandled errors.\n");
2953 ERR_print_errors(bio_err);
2956 /* Let's try to create a ctx directly from the NID: this works for
2957 * curves like Curve25519 that are not implemented through the low
2958 * level EC interface.
2959 * If this fails we try creating a EVP_PKEY_EC generic param ctx,
2960 * then we set the curve by NID before deriving the actual keygen
2961 * ctx for that specific curve. */
2962 kctx = EVP_PKEY_CTX_new_id(test_curves[testnum].nid, NULL); /* keygen ctx from NID */
2964 EVP_PKEY_CTX *pctx = NULL;
2965 EVP_PKEY *params = NULL;
2967 /* If we reach this code EVP_PKEY_CTX_new_id() failed and a
2968 * "int_ctx_new:unsupported algorithm" error was added to the
2970 * We remove it from the error queue as we are handling it. */
2971 unsigned long error = ERR_peek_error(); /* peek the latest error in the queue */
2972 if (error == ERR_peek_last_error() && /* oldest and latest errors match */
2973 /* check that the error origin matches */
2974 ERR_GET_LIB(error) == ERR_LIB_EVP &&
2975 ERR_GET_FUNC(error) == EVP_F_INT_CTX_NEW &&
2976 ERR_GET_REASON(error) == EVP_R_UNSUPPORTED_ALGORITHM)
2977 ERR_get_error(); /* pop error from queue */
2978 if (ERR_peek_error()) {
2980 "Unhandled error in the error queue during ECDH init.\n");
2981 ERR_print_errors(bio_err);
2986 if ( /* Create the context for parameter generation */
2987 !(pctx = EVP_PKEY_CTX_new_id(EVP_PKEY_EC, NULL)) ||
2988 /* Initialise the parameter generation */
2989 !EVP_PKEY_paramgen_init(pctx) ||
2990 /* Set the curve by NID */
2991 !EVP_PKEY_CTX_set_ec_paramgen_curve_nid(pctx,
2994 /* Create the parameter object params */
2995 !EVP_PKEY_paramgen(pctx, ¶ms)) {
2997 BIO_printf(bio_err, "ECDH EC params init failure.\n");
2998 ERR_print_errors(bio_err);
3002 /* Create the context for the key generation */
3003 kctx = EVP_PKEY_CTX_new(params, NULL);
3005 EVP_PKEY_free(params);
3007 EVP_PKEY_CTX_free(pctx);
3010 if (kctx == NULL || /* keygen ctx is not null */
3011 EVP_PKEY_keygen_init(kctx) <= 0/* init keygen ctx */ ) {
3013 BIO_printf(bio_err, "ECDH keygen failure.\n");
3014 ERR_print_errors(bio_err);
3019 if (EVP_PKEY_keygen(kctx, &key_A) <= 0 || /* generate secret key A */
3020 EVP_PKEY_keygen(kctx, &key_B) <= 0 || /* generate secret key B */
3021 !(ctx = EVP_PKEY_CTX_new(key_A, NULL)) || /* derivation ctx from skeyA */
3022 EVP_PKEY_derive_init(ctx) <= 0 || /* init derivation ctx */
3023 EVP_PKEY_derive_set_peer(ctx, key_B) <= 0 || /* set peer pubkey in ctx */
3024 EVP_PKEY_derive(ctx, NULL, &outlen) <= 0 || /* determine max length */
3025 outlen == 0 || /* ensure outlen is a valid size */
3026 outlen > MAX_ECDH_SIZE /* avoid buffer overflow */ ) {
3028 BIO_printf(bio_err, "ECDH key generation failure.\n");
3029 ERR_print_errors(bio_err);
3034 /* Here we perform a test run, comparing the output of a*B and b*A;
3035 * we try this here and assume that further EVP_PKEY_derive calls
3036 * never fail, so we can skip checks in the actually benchmarked
3037 * code, for maximum performance. */
3038 if (!(test_ctx = EVP_PKEY_CTX_new(key_B, NULL)) || /* test ctx from skeyB */
3039 !EVP_PKEY_derive_init(test_ctx) || /* init derivation test_ctx */
3040 !EVP_PKEY_derive_set_peer(test_ctx, key_A) || /* set peer pubkey in test_ctx */
3041 !EVP_PKEY_derive(test_ctx, NULL, &test_outlen) || /* determine max length */
3042 !EVP_PKEY_derive(ctx, loopargs[i].secret_a, &outlen) || /* compute a*B */
3043 !EVP_PKEY_derive(test_ctx, loopargs[i].secret_b, &test_outlen) || /* compute b*A */
3044 test_outlen != outlen /* compare output length */ ) {
3046 BIO_printf(bio_err, "ECDH computation failure.\n");
3047 ERR_print_errors(bio_err);
3052 /* Compare the computation results: CRYPTO_memcmp() returns 0 if equal */
3053 if (CRYPTO_memcmp(loopargs[i].secret_a,
3054 loopargs[i].secret_b, outlen)) {
3056 BIO_printf(bio_err, "ECDH computations don't match.\n");
3057 ERR_print_errors(bio_err);
3062 loopargs[i].ecdh_ctx[testnum] = ctx;
3063 loopargs[i].outlen[testnum] = outlen;
3065 EVP_PKEY_free(key_A);
3066 EVP_PKEY_free(key_B);
3067 EVP_PKEY_CTX_free(kctx);
3069 EVP_PKEY_CTX_free(test_ctx);
3072 if (ecdh_checks != 0) {
3073 pkey_print_message("", "ecdh",
3075 test_curves[testnum].bits, seconds.ecdh);
3078 run_benchmark(async_jobs, ECDH_EVP_derive_key_loop, loopargs);
3081 mr ? "+R7:%ld:%d:%.2f\n" :
3082 "%ld %u-bits ECDH ops in %.2fs\n", count,
3083 test_curves[testnum].bits, d);
3084 ecdh_results[testnum][0] = (double)count / d;
3088 if (rsa_count <= 1) {
3089 /* if longer than 10s, don't do any more */
3090 for (testnum++; testnum < OSSL_NELEM(ecdh_doit); testnum++)
3091 ecdh_doit[testnum] = 0;
3095 for (testnum = 0; testnum < EdDSA_NUM; testnum++) {
3097 EVP_PKEY *ed_pkey = NULL;
3098 EVP_PKEY_CTX *ed_pctx = NULL;
3100 if (!eddsa_doit[testnum])
3101 continue; /* Ignore Curve */
3102 for (i = 0; i < loopargs_len; i++) {
3103 loopargs[i].eddsa_ctx[testnum] = EVP_MD_CTX_new();
3104 if (loopargs[i].eddsa_ctx[testnum] == NULL) {
3109 if ((ed_pctx = EVP_PKEY_CTX_new_id(test_ed_curves[testnum].nid, NULL))
3111 || EVP_PKEY_keygen_init(ed_pctx) <= 0
3112 || EVP_PKEY_keygen(ed_pctx, &ed_pkey) <= 0) {
3114 EVP_PKEY_CTX_free(ed_pctx);
3117 EVP_PKEY_CTX_free(ed_pctx);
3119 if (!EVP_DigestSignInit(loopargs[i].eddsa_ctx[testnum], NULL, NULL,
3122 EVP_PKEY_free(ed_pkey);
3125 EVP_PKEY_free(ed_pkey);
3128 BIO_printf(bio_err, "EdDSA failure.\n");
3129 ERR_print_errors(bio_err);
3132 for (i = 0; i < loopargs_len; i++) {
3133 /* Perform EdDSA signature test */
3134 loopargs[i].sigsize = test_ed_curves[testnum].sigsize;
3135 st = EVP_DigestSign(loopargs[i].eddsa_ctx[testnum],
3136 loopargs[i].buf2, &loopargs[i].sigsize,
3137 loopargs[i].buf, 20);
3143 "EdDSA sign failure. No EdDSA sign will be done.\n");
3144 ERR_print_errors(bio_err);
3147 pkey_print_message("sign", test_ed_curves[testnum].name,
3148 eddsa_c[testnum][0],
3149 test_ed_curves[testnum].bits, seconds.eddsa);
3151 count = run_benchmark(async_jobs, EdDSA_sign_loop, loopargs);
3155 mr ? "+R8:%ld:%u:%s:%.2f\n" :
3156 "%ld %u bits %s signs in %.2fs \n",
3157 count, test_ed_curves[testnum].bits,
3158 test_ed_curves[testnum].name, d);
3159 eddsa_results[testnum][0] = (double)count / d;
3163 /* Perform EdDSA verification test */
3164 for (i = 0; i < loopargs_len; i++) {
3165 st = EVP_DigestVerify(loopargs[i].eddsa_ctx[testnum],
3166 loopargs[i].buf2, loopargs[i].sigsize,
3167 loopargs[i].buf, 20);
3173 "EdDSA verify failure. No EdDSA verify will be done.\n");
3174 ERR_print_errors(bio_err);
3175 eddsa_doit[testnum] = 0;
3177 pkey_print_message("verify", test_ed_curves[testnum].name,
3178 eddsa_c[testnum][1],
3179 test_ed_curves[testnum].bits, seconds.eddsa);
3181 count = run_benchmark(async_jobs, EdDSA_verify_loop, loopargs);
3184 mr ? "+R9:%ld:%u:%s:%.2f\n"
3185 : "%ld %u bits %s verify in %.2fs\n",
3186 count, test_ed_curves[testnum].bits,
3187 test_ed_curves[testnum].name, d);
3188 eddsa_results[testnum][1] = (double)count / d;
3191 if (rsa_count <= 1) {
3192 /* if longer than 10s, don't do any more */
3193 for (testnum++; testnum < EdDSA_NUM; testnum++)
3194 eddsa_doit[testnum] = 0;
3199 #endif /* OPENSSL_NO_EC */
3204 printf("%s\n", OpenSSL_version(OPENSSL_VERSION));
3205 printf("%s\n", OpenSSL_version(OPENSSL_BUILT_ON));
3207 printf("%s ", BN_options());
3208 #ifndef OPENSSL_NO_MD2
3209 printf("%s ", MD2_options());
3211 #ifndef OPENSSL_NO_RC4
3212 printf("%s ", RC4_options());
3214 #ifndef OPENSSL_NO_DES
3215 printf("%s ", DES_options());
3217 printf("%s ", AES_options());
3218 #ifndef OPENSSL_NO_IDEA
3219 printf("%s ", IDEA_options());
3221 #ifndef OPENSSL_NO_BF
3222 printf("%s ", BF_options());
3224 printf("\n%s\n", OpenSSL_version(OPENSSL_CFLAGS));
3232 ("The 'numbers' are in 1000s of bytes per second processed.\n");
3235 for (testnum = 0; testnum < size_num; testnum++)
3236 printf(mr ? ":%d" : "%7d bytes", lengths[testnum]);
3240 for (k = 0; k < ALGOR_NUM; k++) {
3244 printf("+F:%u:%s", k, names[k]);
3246 printf("%-13s", names[k]);
3247 for (testnum = 0; testnum < size_num; testnum++) {
3248 if (results[k][testnum] > 10000 && !mr)
3249 printf(" %11.2fk", results[k][testnum] / 1e3);
3251 printf(mr ? ":%.2f" : " %11.2f ", results[k][testnum]);
3255 #ifndef OPENSSL_NO_RSA
3257 for (k = 0; k < RSA_NUM; k++) {
3260 if (testnum && !mr) {
3261 printf("%18ssign verify sign/s verify/s\n", " ");
3265 printf("+F2:%u:%u:%f:%f\n",
3266 k, rsa_bits[k], rsa_results[k][0], rsa_results[k][1]);
3268 printf("rsa %4u bits %8.6fs %8.6fs %8.1f %8.1f\n",
3269 rsa_bits[k], 1.0 / rsa_results[k][0], 1.0 / rsa_results[k][1],
3270 rsa_results[k][0], rsa_results[k][1]);
3273 #ifndef OPENSSL_NO_DSA
3275 for (k = 0; k < DSA_NUM; k++) {
3278 if (testnum && !mr) {
3279 printf("%18ssign verify sign/s verify/s\n", " ");
3283 printf("+F3:%u:%u:%f:%f\n",
3284 k, dsa_bits[k], dsa_results[k][0], dsa_results[k][1]);
3286 printf("dsa %4u bits %8.6fs %8.6fs %8.1f %8.1f\n",
3287 dsa_bits[k], 1.0 / dsa_results[k][0], 1.0 / dsa_results[k][1],
3288 dsa_results[k][0], dsa_results[k][1]);
3291 #ifndef OPENSSL_NO_EC
3293 for (k = 0; k < OSSL_NELEM(ecdsa_doit); k++) {
3296 if (testnum && !mr) {
3297 printf("%30ssign verify sign/s verify/s\n", " ");
3302 printf("+F4:%u:%u:%f:%f\n",
3303 k, test_curves[k].bits,
3304 ecdsa_results[k][0], ecdsa_results[k][1]);
3306 printf("%4u bits ecdsa (%s) %8.4fs %8.4fs %8.1f %8.1f\n",
3307 test_curves[k].bits, test_curves[k].name,
3308 1.0 / ecdsa_results[k][0], 1.0 / ecdsa_results[k][1],
3309 ecdsa_results[k][0], ecdsa_results[k][1]);
3313 for (k = 0; k < EC_NUM; k++) {
3316 if (testnum && !mr) {
3317 printf("%30sop op/s\n", " ");
3321 printf("+F5:%u:%u:%f:%f\n",
3322 k, test_curves[k].bits,
3323 ecdh_results[k][0], 1.0 / ecdh_results[k][0]);
3326 printf("%4u bits ecdh (%s) %8.4fs %8.1f\n",
3327 test_curves[k].bits, test_curves[k].name,
3328 1.0 / ecdh_results[k][0], ecdh_results[k][0]);
3332 for (k = 0; k < OSSL_NELEM(eddsa_doit); k++) {
3335 if (testnum && !mr) {
3336 printf("%30ssign verify sign/s verify/s\n", " ");
3341 printf("+F6:%u:%u:%s:%f:%f\n",
3342 k, test_ed_curves[k].bits, test_ed_curves[k].name,
3343 eddsa_results[k][0], eddsa_results[k][1]);
3345 printf("%4u bits EdDSA (%s) %8.4fs %8.4fs %8.1f %8.1f\n",
3346 test_ed_curves[k].bits, test_ed_curves[k].name,
3347 1.0 / eddsa_results[k][0], 1.0 / eddsa_results[k][1],
3348 eddsa_results[k][0], eddsa_results[k][1]);
3355 ERR_print_errors(bio_err);
3356 for (i = 0; i < loopargs_len; i++) {
3357 OPENSSL_free(loopargs[i].buf_malloc);
3358 OPENSSL_free(loopargs[i].buf2_malloc);
3360 #ifndef OPENSSL_NO_RSA
3361 for (k = 0; k < RSA_NUM; k++)
3362 RSA_free(loopargs[i].rsa_key[k]);
3364 #ifndef OPENSSL_NO_DSA
3365 for (k = 0; k < DSA_NUM; k++)
3366 DSA_free(loopargs[i].dsa_key[k]);
3368 #ifndef OPENSSL_NO_EC
3369 for (k = 0; k < ECDSA_NUM; k++)
3370 EC_KEY_free(loopargs[i].ecdsa[k]);
3371 for (k = 0; k < EC_NUM; k++)
3372 EVP_PKEY_CTX_free(loopargs[i].ecdh_ctx[k]);
3373 for (k = 0; k < EdDSA_NUM; k++)
3374 EVP_MD_CTX_free(loopargs[i].eddsa_ctx[k]);
3375 OPENSSL_free(loopargs[i].secret_a);
3376 OPENSSL_free(loopargs[i].secret_b);
3380 if (async_jobs > 0) {
3381 for (i = 0; i < loopargs_len; i++)
3382 ASYNC_WAIT_CTX_free(loopargs[i].wait_ctx);
3386 ASYNC_cleanup_thread();
3388 OPENSSL_free(loopargs);
3393 static void print_message(const char *s, long num, int length, int tm)
3397 mr ? "+DT:%s:%d:%d\n"
3398 : "Doing %s for %ds on %d size blocks: ", s, tm, length);
3399 (void)BIO_flush(bio_err);
3404 mr ? "+DN:%s:%ld:%d\n"
3405 : "Doing %s %ld times on %d size blocks: ", s, num, length);
3406 (void)BIO_flush(bio_err);
3410 static void pkey_print_message(const char *str, const char *str2, long num,
3411 unsigned int bits, int tm)
3415 mr ? "+DTP:%d:%s:%s:%d\n"
3416 : "Doing %u bits %s %s's for %ds: ", bits, str, str2, tm);
3417 (void)BIO_flush(bio_err);
3422 mr ? "+DNP:%ld:%d:%s:%s\n"
3423 : "Doing %ld %u bits %s %s's: ", num, bits, str, str2);
3424 (void)BIO_flush(bio_err);
3428 static void print_result(int alg, int run_no, int count, double time_used)
3431 BIO_puts(bio_err, "EVP error!\n");
3435 mr ? "+R:%d:%s:%f\n"
3436 : "%d %s's in %.2fs\n", count, names[alg], time_used);
3437 results[alg][run_no] = ((double)count) / time_used * lengths[run_no];
3441 static char *sstrsep(char **string, const char *delim)
3444 char *token = *string;
3449 memset(isdelim, 0, sizeof(isdelim));
3453 isdelim[(unsigned char)(*delim)] = 1;
3457 while (!isdelim[(unsigned char)(**string)]) {
3469 static int do_multi(int multi, int size_num)
3474 static char sep[] = ":";
3476 fds = app_malloc(sizeof(*fds) * multi, "fd buffer for do_multi");
3477 for (n = 0; n < multi; ++n) {
3478 if (pipe(fd) == -1) {
3479 BIO_printf(bio_err, "pipe failure\n");
3483 (void)BIO_flush(bio_err);
3490 if (dup(fd[1]) == -1) {
3491 BIO_printf(bio_err, "dup failed\n");
3500 printf("Forked child %d\n", n);
3503 /* for now, assume the pipe is long enough to take all the output */
3504 for (n = 0; n < multi; ++n) {
3509 f = fdopen(fds[n], "r");
3510 while (fgets(buf, sizeof(buf), f)) {
3511 p = strchr(buf, '\n');
3514 if (buf[0] != '+') {
3516 "Don't understand line '%s' from child %d\n", buf,
3520 printf("Got: %s from %d\n", buf, n);
3521 if (strncmp(buf, "+F:", 3) == 0) {
3526 alg = atoi(sstrsep(&p, sep));
3528 for (j = 0; j < size_num; ++j)
3529 results[alg][j] += atof(sstrsep(&p, sep));
3530 } else if (strncmp(buf, "+F2:", 4) == 0) {
3535 k = atoi(sstrsep(&p, sep));
3538 d = atof(sstrsep(&p, sep));
3539 rsa_results[k][0] += d;
3541 d = atof(sstrsep(&p, sep));
3542 rsa_results[k][1] += d;
3544 # ifndef OPENSSL_NO_DSA
3545 else if (strncmp(buf, "+F3:", 4) == 0) {
3550 k = atoi(sstrsep(&p, sep));
3553 d = atof(sstrsep(&p, sep));
3554 dsa_results[k][0] += d;
3556 d = atof(sstrsep(&p, sep));
3557 dsa_results[k][1] += d;
3560 # ifndef OPENSSL_NO_EC
3561 else if (strncmp(buf, "+F4:", 4) == 0) {
3566 k = atoi(sstrsep(&p, sep));
3569 d = atof(sstrsep(&p, sep));
3570 ecdsa_results[k][0] += d;
3572 d = atof(sstrsep(&p, sep));
3573 ecdsa_results[k][1] += d;
3574 } else if (strncmp(buf, "+F5:", 4) == 0) {
3579 k = atoi(sstrsep(&p, sep));
3582 d = atof(sstrsep(&p, sep));
3583 ecdh_results[k][0] += d;
3584 } else if (strncmp(buf, "+F6:", 4) == 0) {
3589 k = atoi(sstrsep(&p, sep));
3593 d = atof(sstrsep(&p, sep));
3594 eddsa_results[k][0] += d;
3596 d = atof(sstrsep(&p, sep));
3597 eddsa_results[k][1] += d;
3601 else if (strncmp(buf, "+H:", 3) == 0) {
3604 BIO_printf(bio_err, "Unknown type '%s' from child %d\n", buf,
3615 static void multiblock_speed(const EVP_CIPHER *evp_cipher, int lengths_single,
3616 const openssl_speed_sec_t *seconds)
3618 static const int mblengths_list[] =
3619 { 8 * 1024, 2 * 8 * 1024, 4 * 8 * 1024, 8 * 8 * 1024, 8 * 16 * 1024 };
3620 const int *mblengths = mblengths_list;
3621 int j, count, keylen, num = OSSL_NELEM(mblengths_list);
3622 const char *alg_name;
3623 unsigned char *inp, *out, *key, no_key[32], no_iv[16];
3624 EVP_CIPHER_CTX *ctx;
3627 if (lengths_single) {
3628 mblengths = &lengths_single;
3632 inp = app_malloc(mblengths[num - 1], "multiblock input buffer");
3633 out = app_malloc(mblengths[num - 1] + 1024, "multiblock output buffer");
3634 ctx = EVP_CIPHER_CTX_new();
3635 EVP_EncryptInit_ex(ctx, evp_cipher, NULL, NULL, no_iv);
3637 keylen = EVP_CIPHER_CTX_key_length(ctx);
3638 key = app_malloc(keylen, "evp_cipher key");
3639 EVP_CIPHER_CTX_rand_key(ctx, key);
3640 EVP_EncryptInit_ex(ctx, NULL, NULL, key, NULL);
3641 OPENSSL_clear_free(key, keylen);
3643 EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_AEAD_SET_MAC_KEY, sizeof(no_key), no_key);
3644 alg_name = OBJ_nid2ln(EVP_CIPHER_nid(evp_cipher));
3646 for (j = 0; j < num; j++) {
3647 print_message(alg_name, 0, mblengths[j], seconds->sym);
3649 for (count = 0; run && count < 0x7fffffff; count++) {
3650 unsigned char aad[EVP_AEAD_TLS1_AAD_LEN];
3651 EVP_CTRL_TLS1_1_MULTIBLOCK_PARAM mb_param;
3652 size_t len = mblengths[j];
3655 memset(aad, 0, 8); /* avoid uninitialized values */
3656 aad[8] = 23; /* SSL3_RT_APPLICATION_DATA */
3657 aad[9] = 3; /* version */
3659 aad[11] = 0; /* length */
3661 mb_param.out = NULL;
3664 mb_param.interleave = 8;
3666 packlen = EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_TLS1_1_MULTIBLOCK_AAD,
3667 sizeof(mb_param), &mb_param);
3673 EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_TLS1_1_MULTIBLOCK_ENCRYPT,
3674 sizeof(mb_param), &mb_param);
3678 RAND_bytes(out, 16);
3680 aad[11] = (unsigned char)(len >> 8);
3681 aad[12] = (unsigned char)(len);
3682 pad = EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_AEAD_TLS1_AAD,
3683 EVP_AEAD_TLS1_AAD_LEN, aad);
3684 EVP_Cipher(ctx, out, inp, len + pad);
3688 BIO_printf(bio_err, mr ? "+R:%d:%s:%f\n"
3689 : "%d %s's in %.2fs\n", count, "evp", d);
3690 results[D_EVP][j] = ((double)count) / d * mblengths[j];
3694 fprintf(stdout, "+H");
3695 for (j = 0; j < num; j++)
3696 fprintf(stdout, ":%d", mblengths[j]);
3697 fprintf(stdout, "\n");
3698 fprintf(stdout, "+F:%d:%s", D_EVP, alg_name);
3699 for (j = 0; j < num; j++)
3700 fprintf(stdout, ":%.2f", results[D_EVP][j]);
3701 fprintf(stdout, "\n");
3704 "The 'numbers' are in 1000s of bytes per second processed.\n");
3705 fprintf(stdout, "type ");
3706 for (j = 0; j < num; j++)
3707 fprintf(stdout, "%7d bytes", mblengths[j]);
3708 fprintf(stdout, "\n");
3709 fprintf(stdout, "%-24s", alg_name);
3711 for (j = 0; j < num; j++) {
3712 if (results[D_EVP][j] > 10000)
3713 fprintf(stdout, " %11.2fk", results[D_EVP][j] / 1e3);
3715 fprintf(stdout, " %11.2f ", results[D_EVP][j]);
3717 fprintf(stdout, "\n");
3722 EVP_CIPHER_CTX_free(ctx);