New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

铜锁rsa性能比标准的openssl性能差一倍多 #660

Open

yangpf92 opened this issue Oct 17, 2024 · 1 comment · May be fixed by #668

yangpf92 commented Oct 17, 2024

测试条件:
虚拟化8核，5个nginx worker。2k密钥，前后端都是https服务。(客户端)https->nginx->(服务端)https

编译参数：
铜锁：版本8.3.3。./config enable-ntls enable-ec_elgamal
openssl: 版本1.1.1.d。./config

测试数据:

问题分析:
tongsuo 热点函数ossl_bn_rsa_do_unblind在openssl中不存在，已经被删除。可能是导致性能上不去的原因

Author

yangpf92 commented Oct 17, 2024

客户端加密套件为TLS_RSA_WITH_AES_256_CBC_SHA256

dongbeiouba linked a pull request

that will close this issue

Alternative fix for CVE-2022-4304 #668

Open

5 tasks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment