Jammy test plan. I did this on ppc64el to mix things. I added nistp256 and
nistp384 as the baseline.
===============
# install openssl and libssl-dev
ubuntu@ravi-sharma-sru2130576:~$ apt policy openssl libssl-dev
openssl:
Installed: 3.0.2-0ubuntu1.26
Candidate: 3.0.2-0ubuntu1.26
Version table:
*** 3.0.2-0ubuntu1.26 500
500 http://ports.ubuntu.com/ubuntu-ports jammy-updates/main ppc64el
Packages
500 http://ports.ubuntu.com/ubuntu-ports jammy-security/main ppc64el
Packages
100 /var/lib/dpkg/status
3.0.2-0ubuntu1 500
500 http://ports.ubuntu.com/ubuntu-ports jammy/main ppc64el Packages
libssl-dev:
Installed: 3.0.2-0ubuntu1.26
Candidate: 3.0.2-0ubuntu1.26
Version table:
*** 3.0.2-0ubuntu1.26 500
500 http://ports.ubuntu.com/ubuntu-ports jammy-updates/main ppc64el
Packages
500 http://ports.ubuntu.com/ubuntu-ports jammy-security/main ppc64el
Packages
100 /var/lib/dpkg/status
3.0.2-0ubuntu1 500
500 http://ports.ubuntu.com/ubuntu-ports jammy/main ppc64el Packages
ubuntu@ravi-sharma-sru2130576:~$
# verify symbols are missing
ubuntu@ravi-sharma-sru2130576:~$ nm /usr/lib/powerpc64le-linux-gnu/libcrypto.a
2>&1 | grep EC_GFp_nistp224_method
ubuntu@ravi-sharma-sru2130576:~$
# run benchmarks baseline (do this a couple of times and save the recordings in
a file)
ubuntu@ravi-sharma-sru2130576:~$ taskset -c 0 openssl speed -elapsed -seconds
10 ecdsap224 ecdhp224 ecdsap256 ecdhp256 ecdsap384 ecdhp384 ecdsap521 ecdhp521
You have chosen to measure elapsed time instead of user CPU time.
Doing 224 bits sign ecdsa's for 10s: 24145 224 bits ECDSA signs in 10.00s
Doing 224 bits verify ecdsa's for 10s: 25149 224 bits ECDSA verify in 10.00s
Doing 256 bits sign ecdsa's for 10s: 286602 256 bits ECDSA signs in 10.00s
Doing 256 bits verify ecdsa's for 10s: 97039 256 bits ECDSA verify in 10.00s
Doing 384 bits sign ecdsa's for 10s: 9163 384 bits ECDSA signs in 10.00s
Doing 384 bits verify ecdsa's for 10s: 10873 384 bits ECDSA verify in 10.00s
Doing 521 bits sign ecdsa's for 10s: 3208 521 bits ECDSA signs in 10.00s
Doing 521 bits verify ecdsa's for 10s: 4061 521 bits ECDSA verify in 10.00s
Doing 224 bits ecdh's for 10s: 25824 224-bits ECDH ops in 10.00s
Doing 256 bits ecdh's for 10s: 128094 256-bits ECDH ops in 10.00s
Doing 384 bits ecdh's for 10s: 9686 384-bits ECDH ops in 10.00s
Doing 521 bits ecdh's for 10s: 3413 521-bits ECDH ops in 10.00s
version: 3.0.2
built on: Wed Jul 29 16:56:04 2026 UTC
options: bn(64,64)
compiler: gcc -fPIC -pthread -m64 -Wa,--noexecstack -Wall -Wa,--noexecstack -g
-O3 -ffile-prefix-map=/build/openssl-cFgmw5/openssl-3.0.2=. -flto=auto
-ffat-lto-objects -flto=auto -ffat-lto-objects -fstack-protector-strong
-Wformat -Werror=format-security -DOPENSSL_TLS_SECURITY_LEVEL=2
-DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_BUILDING_OPENSSL
-DNDEBUG -Wdate-time -D_FORTIFY_SOURCE=2
CPUINFO: N/A
sign verify sign/s verify/s
224 bits ecdsa (nistp224) 0.0004s 0.0004s 2414.5 2514.9
256 bits ecdsa (nistp256) 0.0000s 0.0001s 28660.2 9703.9
384 bits ecdsa (nistp384) 0.0011s 0.0009s 916.3 1087.3
521 bits ecdsa (nistp521) 0.0031s 0.0025s 320.8 406.1
op op/s
224 bits ecdh (nistp224) 0.0004s 2582.4
256 bits ecdh (nistp256) 0.0001s 12809.4
384 bits ecdh (nistp384) 0.0010s 968.6
521 bits ecdh (nistp521) 0.0029s 341.3
ubuntu@ravi-sharma-sru2130576:~$ taskset -c 0 openssl speed -elapsed -seconds
10 ecdsap224 ecdhp224 ecdsap256 ecdhp256 ecdsap384 ecdhp384 ecdsap521 ecdhp521
You have chosen to measure elapsed time instead of user CPU time.
Doing 224 bits sign ecdsa's for 10s: 24180 224 bits ECDSA signs in 10.00s
Doing 224 bits verify ecdsa's for 10s: 25026 224 bits ECDSA verify in 10.00s
Doing 256 bits sign ecdsa's for 10s: 282763 256 bits ECDSA signs in 10.00s
Doing 256 bits verify ecdsa's for 10s: 96758 256 bits ECDSA verify in 10.00s
Doing 384 bits sign ecdsa's for 10s: 9166 384 bits ECDSA signs in 10.00s
Doing 384 bits verify ecdsa's for 10s: 10663 384 bits ECDSA verify in 10.00s
Doing 521 bits sign ecdsa's for 10s: 3193 521 bits ECDSA signs in 10.00s
Doing 521 bits verify ecdsa's for 10s: 4077 521 bits ECDSA verify in 10.00s
Doing 224 bits ecdh's for 10s: 26032 224-bits ECDH ops in 10.00s
Doing 256 bits ecdh's for 10s: 127682 256-bits ECDH ops in 10.00s
Doing 384 bits ecdh's for 10s: 9675 384-bits ECDH ops in 10.00s
Doing 521 bits ecdh's for 10s: 3423 521-bits ECDH ops in 10.00s
version: 3.0.2
built on: Wed Jul 29 16:56:04 2026 UTC
options: bn(64,64)
compiler: gcc -fPIC -pthread -m64 -Wa,--noexecstack -Wall -Wa,--noexecstack -g
-O3 -ffile-prefix-map=/build/openssl-cFgmw5/openssl-3.0.2=. -flto=auto
-ffat-lto-objects -flto=auto -ffat-lto-objects -fstack-protector-strong
-Wformat -Werror=format-security -DOPENSSL_TLS_SECURITY_LEVEL=2
-DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_BUILDING_OPENSSL
-DNDEBUG -Wdate-time -D_FORTIFY_SOURCE=2
CPUINFO: N/A
sign verify sign/s verify/s
224 bits ecdsa (nistp224) 0.0004s 0.0004s 2418.0 2502.6
256 bits ecdsa (nistp256) 0.0000s 0.0001s 28276.3 9675.8
384 bits ecdsa (nistp384) 0.0011s 0.0009s 916.6 1066.3
521 bits ecdsa (nistp521) 0.0031s 0.0025s 319.3 407.7
op op/s
224 bits ecdh (nistp224) 0.0004s 2603.2
256 bits ecdh (nistp256) 0.0001s 12768.2
384 bits ecdh (nistp384) 0.0010s 967.5
521 bits ecdh (nistp521) 0.0029s 342.3
ubuntu@ravi-sharma-sru2130576:~$
# Add ppa
ubuntu@ravi-sharma-2130576:~$ sudo add-apt-repository
ppa:ravi-sharma/jammy-sru-2026-04
# install(sudo apt install openssl libssl-dev) and check new versions
ubuntu@ravi-sharma-sru2130576:~$ apt policy openssl libssl-dev
openssl:
Installed: 3.0.2-0ubuntu1.27
Candidate: 3.0.2-0ubuntu1.27
Version table:
*** 3.0.2-0ubuntu1.27 500
500
https://ppa.launchpadcontent.net/ravi-sharma/jammy-sru-2026-04/ubuntu
jammy/main ppc64el Packages
100 /var/lib/dpkg/status
3.0.2-0ubuntu1.26 500
500 http://ports.ubuntu.com/ubuntu-ports jammy-updates/main ppc64el
Packages
500 http://ports.ubuntu.com/ubuntu-ports jammy-security/main ppc64el
Packages
3.0.2-0ubuntu1 500
500 http://ports.ubuntu.com/ubuntu-ports jammy/main ppc64el Packages
libssl-dev:
Installed: 3.0.2-0ubuntu1.27
Candidate: 3.0.2-0ubuntu1.27
Version table:
*** 3.0.2-0ubuntu1.27 500
500
https://ppa.launchpadcontent.net/ravi-sharma/jammy-sru-2026-04/ubuntu
jammy/main ppc64el Packages
100 /var/lib/dpkg/status
3.0.2-0ubuntu1.26 500
500 http://ports.ubuntu.com/ubuntu-ports jammy-updates/main ppc64el
Packages
500 http://ports.ubuntu.com/ubuntu-ports jammy-security/main ppc64el
Packages
3.0.2-0ubuntu1 500
500 http://ports.ubuntu.com/ubuntu-ports jammy/main ppc64el Packages
# symbols should be present now
ubuntu@ravi-sharma-sru2130576:~$ nm /usr/lib/powerpc64le-linux-gnu/libcrypto.a
2>&1 | grep EC_GFp_nistp224_method
U EC_GFp_nistp224_method
0000000000005780 T EC_GFp_nistp224_method
# run benchmarks again (look at the difference in sign/s, verify/s, and op/s)
ubuntu@ravi-sharma-sru2130576:~$ taskset -c 0 openssl speed -elapsed -seconds
10 ecdsap224 ecdhp224 ecdsap256 ecdhp256 ecdsap384 ecdhp384 ecdsap521 ecdhp521
You have chosen to measure elapsed time instead of user CPU time.
Doing 224 bits sign ecdsa's for 10s: 146425 224 bits ECDSA signs in 10.00s
Doing 224 bits verify ecdsa's for 10s: 70416 224 bits ECDSA verify in 10.00s
Doing 256 bits sign ecdsa's for 10s: 291959 256 bits ECDSA signs in 10.00s
Doing 256 bits verify ecdsa's for 10s: 97325 256 bits ECDSA verify in 10.00s
Doing 384 bits sign ecdsa's for 10s: 9158 384 bits ECDSA signs in 10.00s
Doing 384 bits verify ecdsa's for 10s: 10876 384 bits ECDSA verify in 10.00s
Doing 521 bits sign ecdsa's for 10s: 26932 521 bits ECDSA signs in 10.00s
Doing 521 bits verify ecdsa's for 10s: 15778 521 bits ECDSA verify in 10.00s
Doing 224 bits ecdh's for 10s: 106501 224-bits ECDH ops in 10.00s
Doing 256 bits ecdh's for 10s: 127841 256-bits ECDH ops in 10.01s
Doing 384 bits ecdh's for 10s: 9697 384-bits ECDH ops in 10.00s
Doing 521 bits ecdh's for 10s: 29440 521-bits ECDH ops in 10.00s
version: 3.0.2
built on: Wed Aug 12 13:10:04 2026 UTC
options: bn(64,64)
compiler: gcc -fPIC -pthread -m64 -Wa,--noexecstack -Wall -Wa,--noexecstack -g
-O3 -ffile-prefix-map=/build/openssl-ZKXxVm/openssl-3.0.2=. -flto=auto
-ffat-lto-objects -flto=auto -ffat-lto-objects -fstack-protector-strong
-Wformat -Werror=format-security -DOPENSSL_TLS_SECURITY_LEVEL=2
-DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_BUILDING_OPENSSL
-DNDEBUG -Wdate-time -D_FORTIFY_SOURCE=2
CPUINFO: N/A
sign verify sign/s verify/s
224 bits ecdsa (nistp224) 0.0001s 0.0001s 14642.5 7041.6
256 bits ecdsa (nistp256) 0.0000s 0.0001s 29195.9 9732.5
384 bits ecdsa (nistp384) 0.0011s 0.0009s 915.8 1087.6
521 bits ecdsa (nistp521) 0.0004s 0.0006s 2693.2 1577.8
op op/s
224 bits ecdh (nistp224) 0.0001s 10650.1
256 bits ecdh (nistp256) 0.0001s 12771.3
384 bits ecdh (nistp384) 0.0010s 969.7
521 bits ecdh (nistp521) 0.0003s 2944.0
ubuntu@ravi-sharma-sru2130576:~$
ubuntu@ravi-sharma-sru2130576:~$ taskset -c 0 openssl speed -elapsed -seconds
10 ecdsap224 ecdhp224 ecdsap256 ecdhp256 ecdsap384 ecdhp384 ecdsap521 ecdhp521
You have chosen to measure elapsed time instead of user CPU time.
Doing 224 bits sign ecdsa's for 10s: 147511 224 bits ECDSA signs in 10.00s
Doing 224 bits verify ecdsa's for 10s: 70557 224 bits ECDSA verify in 10.00s
Doing 256 bits sign ecdsa's for 10s: 291067 256 bits ECDSA signs in 10.00s
Doing 256 bits verify ecdsa's for 10s: 97451 256 bits ECDSA verify in 10.00s
Doing 384 bits sign ecdsa's for 10s: 9214 384 bits ECDSA signs in 10.00s
Doing 384 bits verify ecdsa's for 10s: 10830 384 bits ECDSA verify in 10.00s
Doing 521 bits sign ecdsa's for 10s: 27043 521 bits ECDSA signs in 10.00s
Doing 521 bits verify ecdsa's for 10s: 15792 521 bits ECDSA verify in 10.00s
Doing 224 bits ecdh's for 10s: 106440 224-bits ECDH ops in 10.00s
Doing 256 bits ecdh's for 10s: 128946 256-bits ECDH ops in 10.00s
Doing 384 bits ecdh's for 10s: 9680 384-bits ECDH ops in 10.01s
Doing 521 bits ecdh's for 10s: 29411 521-bits ECDH ops in 10.00s
version: 3.0.2
built on: Wed Aug 12 13:10:04 2026 UTC
options: bn(64,64)
compiler: gcc -fPIC -pthread -m64 -Wa,--noexecstack -Wall -Wa,--noexecstack -g
-O3 -ffile-prefix-map=/build/openssl-ZKXxVm/openssl-3.0.2=. -flto=auto
-ffat-lto-objects -flto=auto -ffat-lto-objects -fstack-protector-strong
-Wformat -Werror=format-security -DOPENSSL_TLS_SECURITY_LEVEL=2
-DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_BUILDING_OPENSSL
-DNDEBUG -Wdate-time -D_FORTIFY_SOURCE=2
CPUINFO: N/A
sign verify sign/s verify/s
224 bits ecdsa (nistp224) 0.0001s 0.0001s 14751.1 7055.7
256 bits ecdsa (nistp256) 0.0000s 0.0001s 29106.7 9745.1
384 bits ecdsa (nistp384) 0.0011s 0.0009s 921.4 1083.0
521 bits ecdsa (nistp521) 0.0004s 0.0006s 2704.3 1579.2
op op/s
224 bits ecdh (nistp224) 0.0001s 10644.0
256 bits ecdh (nistp256) 0.0001s 12894.6
384 bits ecdh (nistp384) 0.0010s 967.0
521 bits ecdh (nistp521) 0.0003s 2941.1
ubuntu@ravi-sharma-sru2130576:~$
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2130576
Title:
Missing ec_nistp_64_gcc_128 optimization on non-x86_64 architectures
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/2130576/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
