[tor-talk] obfsproxy failure: obfs3

[Roger Dingledine]

On Wed, Aug 14, 2013 at 08:46:32AM -0700, lee colleton wrote:
> The packaged version of tor complains about support for faster OpenSSL:
> 
> Aug 14 15:26:52.000 [notice] Tor 0.2.4.16-rc (git-dcf6b6d7dda9ffbd)
> opening log file.
> Aug 14 15:26:52.000 [notice] We were built to run on a 64-bit CPU,
> with OpenSSL 1.0.1 or later, but with a version of OpenSSL that
> apparently lacks accelerated support for the NIST P-224 and P-256
> groups. Building openssl with such support (using the
> enable-ec_nistp_64_gcc_128 option when configuring it) would make ECDH
> much faster.

Right. Debian's openssl doesn't build with that option. Search the web for
"debian enable-ec_nistp_64_gcc_128" and you'll find some tickets about
it -- the short version is that both Debian and Ubuntu are waiting for
openssl to turn it on by default.

--Roger