Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 460790 - dev-libs/openssl-1.0.1e - add enable-ec_nistp_64_gcc_128 configuration option
Summary: dev-libs/openssl-1.0.1e - add enable-ec_nistp_64_gcc_128 configuration option
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Core system (show other bugs)
Hardware: AMD64 Linux
: Normal enhancement (vote)
Assignee: Gentoo's Team for Core System packages
URL: http://forums.gentoo.org/viewtopic-t-...
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2013-03-08 16:25 UTC by Ameretat.Reith
Modified: 2022-10-08 16:18 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Ameretat.Reith 2013-03-08 16:25:59 UTC
Please let user set this option by some way (USE flag or enabling it by default).
net-misc/tor users need it.

Reproducible: Always
Comment 1 Hanno Böck gentoo-dev 2013-04-14 09:28:09 UTC
Let me give some additional info here: this flag enables some optimizations on 64 bit that vastly improve the speed of elliptic curve crypto operations.
Most notably the difference can be seen with openssl speed ecdh, where it's on some curves roughly 3-4 times faster:

 224 bit ecdh (nistp224)   0.0002s   6358.7
 256 bit ecdh (nistp256)   0.0003s   2964.8

vs:
 224 bit ecdh (nistp224)   0.0005s   1827.1
 256 bit ecdh (nistp256)   0.0006s   1603.3

The optimizations only need a 64 bit machine and __uint128_t defined, which should be available with pretty much any recent gcc version. So I'd propose to enable this by default on all amd64 systems, as there's barely a reason not to do.

See this debian bug report for more info:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=698447
Comment 2 SpanKY gentoo-dev 2013-04-27 11:06:32 UTC
should be all set now in the tree; thanks for the report!

Commit message: Automatically enable optimized EC 64bit code when the compiler supports it
http://sources.gentoo.org/dev-libs/openssl/openssl-1.0.1e-r1.ebuild?rev=1.1