[tor-bugs] #23448 [- Select a component]: ECDH performance warning with LibreSSL

Tor Bug Tracker & Wiki blackhole at torproject.org
Sun Sep 10 14:09:57 UTC 2017


#23448: ECDH performance warning with LibreSSL
--------------------------------------+---------------------------
     Reporter:  svengo                |      Owner:  (none)
         Type:  defect                |     Status:  new
     Priority:  Medium                |  Milestone:
    Component:  - Select a component  |    Version:  Tor: 0.3.0.10
     Severity:  Normal                |   Keywords:
Actual Points:                        |  Parent ID:
       Points:                        |   Reviewer:
      Sponsor:                        |
--------------------------------------+---------------------------
 Tor 0.3.0.10 running with LibreSSL 2.5.5 (latest stable):

 {{{
 [notice] Tor 0.3.0.10 (git-c33db290a9d8d0f9) running on Linux with
 Libevent 2.1.8-stable, OpenSSL LibreSSL 2.5.5 and Zlib 1.2.11.
 }}}

 {{{
 [notice] We were built to run on a 64-bit CPU, with OpenSSL 1.0.1 or
 later, but with a version of OpenSSL that apparently lacks accelerated
 support for the NIST P-224 and P-256 groups. Building openssl with such
 support (using the enable-ec_nistp_64_gcc_128 option when configuring it)
 would make ECDH much faster.
 }}}

 LibreSSL doesn't have this configure option and I don't think that there
 are any problems with ECDH.

 Maybe its time to remove the warning?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/23448>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list