?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
update libressl to v2.7.4
[unleashed.git] / bin / openssl / speed.c
bloba21f67b5cfe88f7e0e09b85ee3b79b35a06c50fa
1 /* $OpenBSD: speed.c,v 1.22 2018/02/07 05:47:55 jsing Exp $ */
2 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
3 * All rights reserved.
4 *
5 * This package is an SSL implementation written
6 * by Eric Young (eay@cryptsoft.com).
7 * The implementation was written so as to conform with Netscapes SSL.
8 *
9 * This library is free for commercial and non-commercial use as long as
10 * the following conditions are aheared to. The following conditions
11 * apply to all code found in this distribution, be it the RC4, RSA,
12 * lhash, DES, etc., code; not just the SSL code. The SSL documentation
13 * included with this distribution is covered by the same copyright terms
14 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
15 *
16 * Copyright remains Eric Young's, and as such any Copyright notices in
17 * the code are not to be removed.
18 * If this package is used in a product, Eric Young should be given attribution
19 * as the author of the parts of the library used.
20 * This can be in the form of a textual message at program startup or
21 * in documentation (online or textual) provided with the package.
22 *
23 * Redistribution and use in source and binary forms, with or without
24 * modification, are permitted provided that the following conditions
25 * are met:
26 * 1. Redistributions of source code must retain the copyright
27 * notice, this list of conditions and the following disclaimer.
28 * 2. Redistributions in binary form must reproduce the above copyright
29 * notice, this list of conditions and the following disclaimer in the
30 * documentation and/or other materials provided with the distribution.
31 * 3. All advertising materials mentioning features or use of this software
32 * must display the following acknowledgement:
33 * "This product includes cryptographic software written by
34 * Eric Young (eay@cryptsoft.com)"
35 * The word 'cryptographic' can be left out if the rouines from the library
36 * being used are not cryptographic related :-).
37 * 4. If you include any Windows specific code (or a derivative thereof) from
38 * the apps directory (application code) you must include an acknowledgement:
39 * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
40 *
41 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
42 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
43 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
44 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
45 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
46 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
47 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
48 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
49 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
50 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
51 * SUCH DAMAGE.
52 *
53 * The licence and distribution terms for any publically available version or
54 * derivative of this code cannot be changed. i.e. this code cannot simply be
55 * copied and put under another distribution licence
56 * [including the GNU Public Licence.]
57 */
58 /* ====================================================================
59 * Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
60 *
61 * Portions of the attached software ("Contribution") are developed by
62 * SUN MICROSYSTEMS, INC., and are contributed to the OpenSSL project.
63 *
64 * The Contribution is licensed pursuant to the OpenSSL open source
65 * license provided above.
66 *
67 * The ECDH and ECDSA speed test software is originally written by
68 * Sumit Gupta of Sun Microsystems Laboratories.
69 *
70 */
71
72 /* most of this code has been pilfered from my libdes speed.c program */
73
74 #ifndef OPENSSL_NO_SPEED
75
76 #define SECONDS 3
77 #define RSA_SECONDS 10
78 #define DSA_SECONDS 10
79 #define ECDSA_SECONDS 10
80 #define ECDH_SECONDS 10
81
82 #include <math.h>
83 #include <signal.h>
84 #include <stdio.h>
85 #include <stdlib.h>
86 #include <limits.h>
87 #include <string.h>
88 #include <unistd.h>
89
90 #include "apps.h"
91
92 #include <openssl/bn.h>
93 #include <openssl/crypto.h>
94 #include <openssl/err.h>
95 #include <openssl/evp.h>
96 #include <openssl/modes.h>
97 #include <openssl/objects.h>
98 #include <openssl/x509.h>
99
100 #ifndef OPENSSL_NO_AES
101 #include <openssl/aes.h>
102 #endif
103 #ifndef OPENSSL_NO_BF
104 #include <openssl/blowfish.h>
105 #endif
106 #ifndef OPENSSL_NO_CAST
107 #include <openssl/cast.h>
108 #endif
109 #ifndef OPENSSL_NO_CAMELLIA
110 #include <openssl/camellia.h>
111 #endif
112 #ifndef OPENSSL_NO_DES
113 #include <openssl/des.h>
114 #endif
115 #include <openssl/dsa.h>
116 #include <openssl/ecdh.h>
117 #include <openssl/ecdsa.h>
118 #ifndef OPENSSL_NO_HMAC
119 #include <openssl/hmac.h>
120 #endif
121 #ifndef OPENSSL_NO_IDEA
122 #include <openssl/idea.h>
123 #endif
124 #ifndef OPENSSL_NO_MD4
125 #include <openssl/md4.h>
126 #endif
127 #ifndef OPENSSL_NO_MD5
128 #include <openssl/md5.h>
129 #endif
130 #ifndef OPENSSL_NO_RC2
131 #include <openssl/rc2.h>
132 #endif
133 #ifndef OPENSSL_NO_RC4
134 #include <openssl/rc4.h>
135 #endif
136 #include <openssl/rsa.h>
137 #ifndef OPENSSL_NO_RIPEMD
138 #include <openssl/ripemd.h>
139 #endif
140 #ifndef OPENSSL_NO_SHA
141 #include <openssl/sha.h>
142 #endif
143 #ifndef OPENSSL_NO_WHIRLPOOL
144 #include <openssl/whrlpool.h>
145 #endif
146
147 #include "./testdsa.h"
148 #include "./testrsa.h"
149
150 #define BUFSIZE (1024*8+64)
151 int run = 0;
152
153 static int mr = 0;
154 static int usertime = 1;
155
156 static double Time_F(int s);
157 static void print_message(const char *s, long num, int length);
158 static void
159 pkey_print_message(const char *str, const char *str2,
160 long num, int bits, int sec);
161 static void print_result(int alg, int run_no, int count, double time_used);
162 static int do_multi(int multi);
163
164 #define ALGOR_NUM 32
165 #define SIZE_NUM 5
166 #define RSA_NUM 4
167 #define DSA_NUM 3
168
169 #define EC_NUM 16
170 #define MAX_ECDH_SIZE 256
171
172 static const char *names[ALGOR_NUM] = {
173 "md2", "md4", "md5", "hmac(md5)", "sha1", "rmd160",
174 "rc4", "des cbc", "des ede3", "idea cbc", "seed cbc",
175 "rc2 cbc", "rc5-32/12 cbc", "blowfish cbc", "cast cbc",
176 "aes-128 cbc", "aes-192 cbc", "aes-256 cbc",
177 "camellia-128 cbc", "camellia-192 cbc", "camellia-256 cbc",
178 "evp", "sha256", "sha512", "whirlpool",
179 "aes-128 ige", "aes-192 ige", "aes-256 ige", "ghash",
180 "aes-128 gcm", "aes-256 gcm", "chacha20 poly1305",
181 };
182 static double results[ALGOR_NUM][SIZE_NUM];
183 static int lengths[SIZE_NUM] = {16, 64, 256, 1024, 8 * 1024};
184 static double rsa_results[RSA_NUM][2];
185 static double dsa_results[DSA_NUM][2];
186 static double ecdsa_results[EC_NUM][2];
187 static double ecdh_results[EC_NUM][1];
188
189 static void sig_done(int sig);
190
191 static void
192 sig_done(int sig)
193 {
194 signal(SIGALRM, sig_done);
195 run = 0;
196 }
197
198 #define START 0
199 #define STOP 1
200
201
202 static double
203 Time_F(int s)
204 {
205 if (usertime)
206 return app_timer_user(s);
207 else
208 return app_timer_real(s);
209 }
210
211
212 static const int KDF1_SHA1_len = 20;
213 static void *
214 KDF1_SHA1(const void *in, size_t inlen, void *out, size_t * outlen)
215 {
216 #ifndef OPENSSL_NO_SHA
217 if (*outlen < SHA_DIGEST_LENGTH)
218 return NULL;
219 else
220 *outlen = SHA_DIGEST_LENGTH;
221 return SHA1(in, inlen, out);
222 #else
223 return NULL;
224 #endif /* OPENSSL_NO_SHA */
225 }
226
227 int
228 speed_main(int argc, char **argv)
229 {
230 unsigned char *buf = NULL, *buf2 = NULL;
231 int mret = 1;
232 long count = 0, save_count = 0;
233 int i, j, k;
234 long rsa_count;
235 unsigned rsa_num;
236 unsigned char md[EVP_MAX_MD_SIZE];
237 #ifndef OPENSSL_NO_MD4
238 unsigned char md4[MD4_DIGEST_LENGTH];
239 #endif
240 #ifndef OPENSSL_NO_MD5
241 unsigned char md5[MD5_DIGEST_LENGTH];
242 unsigned char hmac[MD5_DIGEST_LENGTH];
243 #endif
244 #ifndef OPENSSL_NO_SHA
245 unsigned char sha[SHA_DIGEST_LENGTH];
246 #ifndef OPENSSL_NO_SHA256
247 unsigned char sha256[SHA256_DIGEST_LENGTH];
248 #endif
249 #ifndef OPENSSL_NO_SHA512
250 unsigned char sha512[SHA512_DIGEST_LENGTH];
251 #endif
252 #endif
253 #ifndef OPENSSL_NO_WHIRLPOOL
254 unsigned char whirlpool[WHIRLPOOL_DIGEST_LENGTH];
255 #endif
256 #ifndef OPENSSL_NO_RIPEMD
257 unsigned char rmd160[RIPEMD160_DIGEST_LENGTH];
258 #endif
259 #ifndef OPENSSL_NO_RC4
260 RC4_KEY rc4_ks;
261 #endif
262 #ifndef OPENSSL_NO_RC2
263 RC2_KEY rc2_ks;
264 #endif
265 #ifndef OPENSSL_NO_IDEA
266 IDEA_KEY_SCHEDULE idea_ks;
267 #endif
268 #ifndef OPENSSL_NO_BF
269 BF_KEY bf_ks;
270 #endif
271 #ifndef OPENSSL_NO_CAST
272 CAST_KEY cast_ks;
273 #endif
274 static const unsigned char key16[16] =
275 {0x12, 0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0,
276 0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12};
277 #ifndef OPENSSL_NO_AES
278 static const unsigned char key24[24] =
279 {0x12, 0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0,
280 0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12,
281 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12, 0x34};
282 static const unsigned char key32[32] =
283 {0x12, 0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0,
284 0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12,
285 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12, 0x34,
286 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12, 0x34, 0x56};
287 #endif
288 #ifndef OPENSSL_NO_CAMELLIA
289 static const unsigned char ckey24[24] =
290 {0x12, 0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0,
291 0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12,
292 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12, 0x34};
293 static const unsigned char ckey32[32] =
294 {0x12, 0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0,
295 0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12,
296 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12, 0x34,
297 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12, 0x34, 0x56};
298 #endif
299 #ifndef OPENSSL_NO_AES
300 #define MAX_BLOCK_SIZE 128
301 #else
302 #define MAX_BLOCK_SIZE 64
303 #endif
304 unsigned char DES_iv[8];
305 unsigned char iv[2 * MAX_BLOCK_SIZE / 8];
306 #ifndef OPENSSL_NO_DES
307 static DES_cblock key = {0x12, 0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0};
308 static DES_cblock key2 = {0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12};
309 static DES_cblock key3 = {0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12, 0x34};
310 DES_key_schedule sch;
311 DES_key_schedule sch2;
312 DES_key_schedule sch3;
313 #endif
314 #ifndef OPENSSL_NO_AES
315 AES_KEY aes_ks1, aes_ks2, aes_ks3;
316 #endif
317 #ifndef OPENSSL_NO_CAMELLIA
318 CAMELLIA_KEY camellia_ks1, camellia_ks2, camellia_ks3;
319 #endif
320 #define D_MD2 0
321 #define D_MD4 1
322 #define D_MD5 2
323 #define D_HMAC 3
324 #define D_SHA1 4
325 #define D_RMD160 5
326 #define D_RC4 6
327 #define D_CBC_DES 7
328 #define D_EDE3_DES 8
329 #define D_CBC_IDEA 9
330 #define D_CBC_SEED 10
331 #define D_CBC_RC2 11
332 #define D_CBC_RC5 12
333 #define D_CBC_BF 13
334 #define D_CBC_CAST 14
335 #define D_CBC_128_AES 15
336 #define D_CBC_192_AES 16
337 #define D_CBC_256_AES 17
338 #define D_CBC_128_CML 18
339 #define D_CBC_192_CML 19
340 #define D_CBC_256_CML 20
341 #define D_EVP 21
342 #define D_SHA256 22
343 #define D_SHA512 23
344 #define D_WHIRLPOOL 24
345 #define D_IGE_128_AES 25
346 #define D_IGE_192_AES 26
347 #define D_IGE_256_AES 27
348 #define D_GHASH 28
349 #define D_AES_128_GCM 29
350 #define D_AES_256_GCM 30
351 #define D_CHACHA20_POLY1305 31
352 double d = 0.0;
353 long c[ALGOR_NUM][SIZE_NUM];
354 #define R_DSA_512 0
355 #define R_DSA_1024 1
356 #define R_DSA_2048 2
357 #define R_RSA_512 0
358 #define R_RSA_1024 1
359 #define R_RSA_2048 2
360 #define R_RSA_4096 3
361
362 #define R_EC_P160 0
363 #define R_EC_P192 1
364 #define R_EC_P224 2
365 #define R_EC_P256 3
366 #define R_EC_P384 4
367 #define R_EC_P521 5
368 #define R_EC_K163 6
369 #define R_EC_K233 7
370 #define R_EC_K283 8
371 #define R_EC_K409 9
372 #define R_EC_K571 10
373 #define R_EC_B163 11
374 #define R_EC_B233 12
375 #define R_EC_B283 13
376 #define R_EC_B409 14
377 #define R_EC_B571 15
378
379 RSA *rsa_key[RSA_NUM];
380 long rsa_c[RSA_NUM][2];
381 static unsigned int rsa_bits[RSA_NUM] = {512, 1024, 2048, 4096};
382 static unsigned char *rsa_data[RSA_NUM] =
383 {test512, test1024, test2048, test4096};
384 static int rsa_data_length[RSA_NUM] = {
385 sizeof(test512), sizeof(test1024),
386 sizeof(test2048), sizeof(test4096)};
387 DSA *dsa_key[DSA_NUM];
388 long dsa_c[DSA_NUM][2];
389 static unsigned int dsa_bits[DSA_NUM] = {512, 1024, 2048};
390 #ifndef OPENSSL_NO_EC
391 /*
392 * We only test over the following curves as they are representative,
393 * To add tests over more curves, simply add the curve NID and curve
394 * name to the following arrays and increase the EC_NUM value
395 * accordingly.
396 */
397 static unsigned int test_curves[EC_NUM] =
398 {
399 /* Prime Curves */
400 NID_secp160r1,
401 NID_X9_62_prime192v1,
402 NID_secp224r1,
403 NID_X9_62_prime256v1,
404 NID_secp384r1,
405 NID_secp521r1,
406 /* Binary Curves */
407 NID_sect163k1,
408 NID_sect233k1,
409 NID_sect283k1,
410 NID_sect409k1,
411 NID_sect571k1,
412 NID_sect163r2,
413 NID_sect233r1,
414 NID_sect283r1,
415 NID_sect409r1,
416 NID_sect571r1
417 };
418 static const char *test_curves_names[EC_NUM] =
419 {
420 /* Prime Curves */
421 "secp160r1",
422 "nistp192",
423 "nistp224",
424 "nistp256",
425 "nistp384",
426 "nistp521",
427 /* Binary Curves */
428 "nistk163",
429 "nistk233",
430 "nistk283",
431 "nistk409",
432 "nistk571",
433 "nistb163",
434 "nistb233",
435 "nistb283",
436 "nistb409",
437 "nistb571"
438 };
439 static int test_curves_bits[EC_NUM] =
440 {
441 160, 192, 224, 256, 384, 521,
442 163, 233, 283, 409, 571,
443 163, 233, 283, 409, 571
444 };
445
446 #endif
447
448 unsigned char ecdsasig[256];
449 unsigned int ecdsasiglen;
450 EC_KEY *ecdsa[EC_NUM];
451 long ecdsa_c[EC_NUM][2];
452
453 EC_KEY *ecdh_a[EC_NUM], *ecdh_b[EC_NUM];
454 unsigned char secret_a[MAX_ECDH_SIZE], secret_b[MAX_ECDH_SIZE];
455 int secret_size_a, secret_size_b;
456 int ecdh_checks = 0;
457 int secret_idx = 0;
458 long ecdh_c[EC_NUM][2];
459
460 int rsa_doit[RSA_NUM];
461 int dsa_doit[DSA_NUM];
462 int ecdsa_doit[EC_NUM];
463 int ecdh_doit[EC_NUM];
464 int doit[ALGOR_NUM];
465 int pr_header = 0;
466 const EVP_CIPHER *evp_cipher = NULL;
467 const EVP_MD *evp_md = NULL;
468 int decrypt = 0;
469 int multi = 0;
470 const char *errstr = NULL;
471
472 if (single_execution) {
473 if (pledge("stdio proc", NULL) == -1) {
474 perror("pledge");
475 exit(1);
476 }
477 }
478
479 usertime = -1;
480
481 memset(results, 0, sizeof(results));
482 memset(dsa_key, 0, sizeof(dsa_key));
483 for (i = 0; i < EC_NUM; i++)
484 ecdsa[i] = NULL;
485 for (i = 0; i < EC_NUM; i++) {
486 ecdh_a[i] = NULL;
487 ecdh_b[i] = NULL;
488 }
489
490 memset(rsa_key, 0, sizeof(rsa_key));
491 for (i = 0; i < RSA_NUM; i++)
492 rsa_key[i] = NULL;
493
494 if ((buf = malloc(BUFSIZE)) == NULL) {
495 BIO_printf(bio_err, "out of memory\n");
496 goto end;
497 }
498 if ((buf2 = malloc(BUFSIZE)) == NULL) {
499 BIO_printf(bio_err, "out of memory\n");
500 goto end;
501 }
502 memset(c, 0, sizeof(c));
503 memset(DES_iv, 0, sizeof(DES_iv));
504 memset(iv, 0, sizeof(iv));
505
506 for (i = 0; i < ALGOR_NUM; i++)
507 doit[i] = 0;
508 for (i = 0; i < RSA_NUM; i++)
509 rsa_doit[i] = 0;
510 for (i = 0; i < DSA_NUM; i++)
511 dsa_doit[i] = 0;
512 for (i = 0; i < EC_NUM; i++)
513 ecdsa_doit[i] = 0;
514 for (i = 0; i < EC_NUM; i++)
515 ecdh_doit[i] = 0;
516
517
518 j = 0;
519 argc--;
520 argv++;
521 while (argc) {
522 if ((argc > 0) && (strcmp(*argv, "-elapsed") == 0)) {
523 usertime = 0;
524 j--; /* Otherwise, -elapsed gets confused with an
525 * algorithm. */
526 } else if ((argc > 0) && (strcmp(*argv, "-evp") == 0)) {
527 argc--;
528 argv++;
529 if (argc == 0) {
530 BIO_printf(bio_err, "no EVP given\n");
531 goto end;
532 }
533 evp_cipher = EVP_get_cipherbyname(*argv);
534 if (!evp_cipher) {
535 evp_md = EVP_get_digestbyname(*argv);
536 }
537 if (!evp_cipher && !evp_md) {
538 BIO_printf(bio_err, "%s is an unknown cipher or digest\n", *argv);
539 goto end;
540 }
541 doit[D_EVP] = 1;
542 } else if (argc > 0 && !strcmp(*argv, "-decrypt")) {
543 decrypt = 1;
544 j--; /* Otherwise, -decrypt gets confused with an
545 * algorithm. */
546 }
547 else if ((argc > 0) && (strcmp(*argv, "-multi") == 0)) {
548 argc--;
549 argv++;
550 if (argc == 0) {
551 BIO_printf(bio_err, "no multi count given\n");
552 goto end;
553 }
554 multi = strtonum(argv[0], 1, INT_MAX, &errstr);
555 if (errstr) {
556 BIO_printf(bio_err, "bad multi count: %s", errstr);
557 goto end;
558 }
559 j--; /* Otherwise, -multi gets confused with an
560 * algorithm. */
561 }
562 else if (argc > 0 && !strcmp(*argv, "-mr")) {
563 mr = 1;
564 j--; /* Otherwise, -mr gets confused with an
565 * algorithm. */
566 } else
567 #ifndef OPENSSL_NO_MD4
568 if (strcmp(*argv, "md4") == 0)
569 doit[D_MD4] = 1;
570 else
571 #endif
572 #ifndef OPENSSL_NO_MD5
573 if (strcmp(*argv, "md5") == 0)
574 doit[D_MD5] = 1;
575 else
576 #endif
577 #ifndef OPENSSL_NO_MD5
578 if (strcmp(*argv, "hmac") == 0)
579 doit[D_HMAC] = 1;
580 else
581 #endif
582 #ifndef OPENSSL_NO_SHA
583 if (strcmp(*argv, "sha1") == 0)
584 doit[D_SHA1] = 1;
585 else if (strcmp(*argv, "sha") == 0)
586 doit[D_SHA1] = 1,
587 doit[D_SHA256] = 1,
588 doit[D_SHA512] = 1;
589 else
590 #ifndef OPENSSL_NO_SHA256
591 if (strcmp(*argv, "sha256") == 0)
592 doit[D_SHA256] = 1;
593 else
594 #endif
595 #ifndef OPENSSL_NO_SHA512
596 if (strcmp(*argv, "sha512") == 0)
597 doit[D_SHA512] = 1;
598 else
599 #endif
600 #endif
601 #ifndef OPENSSL_NO_WHIRLPOOL
602 if (strcmp(*argv, "whirlpool") == 0)
603 doit[D_WHIRLPOOL] = 1;
604 else
605 #endif
606 #ifndef OPENSSL_NO_RIPEMD
607 if (strcmp(*argv, "ripemd") == 0)
608 doit[D_RMD160] = 1;
609 else if (strcmp(*argv, "rmd160") == 0)
610 doit[D_RMD160] = 1;
611 else if (strcmp(*argv, "ripemd160") == 0)
612 doit[D_RMD160] = 1;
613 else
614 #endif
615 #ifndef OPENSSL_NO_RC4
616 if (strcmp(*argv, "rc4") == 0)
617 doit[D_RC4] = 1;
618 else
619 #endif
620 #ifndef OPENSSL_NO_DES
621 if (strcmp(*argv, "des-cbc") == 0)
622 doit[D_CBC_DES] = 1;
623 else if (strcmp(*argv, "des-ede3") == 0)
624 doit[D_EDE3_DES] = 1;
625 else
626 #endif
627 #ifndef OPENSSL_NO_AES
628 if (strcmp(*argv, "aes-128-cbc") == 0)
629 doit[D_CBC_128_AES] = 1;
630 else if (strcmp(*argv, "aes-192-cbc") == 0)
631 doit[D_CBC_192_AES] = 1;
632 else if (strcmp(*argv, "aes-256-cbc") == 0)
633 doit[D_CBC_256_AES] = 1;
634 else if (strcmp(*argv, "aes-128-ige") == 0)
635 doit[D_IGE_128_AES] = 1;
636 else if (strcmp(*argv, "aes-192-ige") == 0)
637 doit[D_IGE_192_AES] = 1;
638 else if (strcmp(*argv, "aes-256-ige") == 0)
639 doit[D_IGE_256_AES] = 1;
640 else
641 #endif
642 #ifndef OPENSSL_NO_CAMELLIA
643 if (strcmp(*argv, "camellia-128-cbc") == 0)
644 doit[D_CBC_128_CML] = 1;
645 else if (strcmp(*argv, "camellia-192-cbc") == 0)
646 doit[D_CBC_192_CML] = 1;
647 else if (strcmp(*argv, "camellia-256-cbc") == 0)
648 doit[D_CBC_256_CML] = 1;
649 else
650 #endif
651 #ifndef RSA_NULL
652 if (strcmp(*argv, "openssl") == 0) {
653 RSA_set_default_method(RSA_PKCS1_SSLeay());
654 j--;
655 } else
656 #endif
657 if (strcmp(*argv, "dsa512") == 0)
658 dsa_doit[R_DSA_512] = 2;
659 else if (strcmp(*argv, "dsa1024") == 0)
660 dsa_doit[R_DSA_1024] = 2;
661 else if (strcmp(*argv, "dsa2048") == 0)
662 dsa_doit[R_DSA_2048] = 2;
663 else if (strcmp(*argv, "rsa512") == 0)
664 rsa_doit[R_RSA_512] = 2;
665 else if (strcmp(*argv, "rsa1024") == 0)
666 rsa_doit[R_RSA_1024] = 2;
667 else if (strcmp(*argv, "rsa2048") == 0)
668 rsa_doit[R_RSA_2048] = 2;
669 else if (strcmp(*argv, "rsa4096") == 0)
670 rsa_doit[R_RSA_4096] = 2;
671 else
672 #ifndef OPENSSL_NO_RC2
673 if (strcmp(*argv, "rc2-cbc") == 0)
674 doit[D_CBC_RC2] = 1;
675 else if (strcmp(*argv, "rc2") == 0)
676 doit[D_CBC_RC2] = 1;
677 else
678 #endif
679 #ifndef OPENSSL_NO_IDEA
680 if (strcmp(*argv, "idea-cbc") == 0)
681 doit[D_CBC_IDEA] = 1;
682 else if (strcmp(*argv, "idea") == 0)
683 doit[D_CBC_IDEA] = 1;
684 else
685 #endif
686 #ifndef OPENSSL_NO_BF
687 if (strcmp(*argv, "bf-cbc") == 0)
688 doit[D_CBC_BF] = 1;
689 else if (strcmp(*argv, "blowfish") == 0)
690 doit[D_CBC_BF] = 1;
691 else if (strcmp(*argv, "bf") == 0)
692 doit[D_CBC_BF] = 1;
693 else
694 #endif
695 #ifndef OPENSSL_NO_CAST
696 if (strcmp(*argv, "cast-cbc") == 0)
697 doit[D_CBC_CAST] = 1;
698 else if (strcmp(*argv, "cast") == 0)
699 doit[D_CBC_CAST] = 1;
700 else if (strcmp(*argv, "cast5") == 0)
701 doit[D_CBC_CAST] = 1;
702 else
703 #endif
704 #ifndef OPENSSL_NO_DES
705 if (strcmp(*argv, "des") == 0) {
706 doit[D_CBC_DES] = 1;
707 doit[D_EDE3_DES] = 1;
708 } else
709 #endif
710 #ifndef OPENSSL_NO_AES
711 if (strcmp(*argv, "aes") == 0) {
712 doit[D_CBC_128_AES] = 1;
713 doit[D_CBC_192_AES] = 1;
714 doit[D_CBC_256_AES] = 1;
715 } else if (strcmp(*argv, "ghash") == 0)
716 doit[D_GHASH] = 1;
717 else if (strcmp(*argv,"aes-128-gcm") == 0)
718 doit[D_AES_128_GCM]=1;
719 else if (strcmp(*argv,"aes-256-gcm") == 0)
720 doit[D_AES_256_GCM]=1;
721 else
722 #endif
723 #ifndef OPENSSL_NO_CAMELLIA
724 if (strcmp(*argv, "camellia") == 0) {
725 doit[D_CBC_128_CML] = 1;
726 doit[D_CBC_192_CML] = 1;
727 doit[D_CBC_256_CML] = 1;
728 } else
729 #endif
730 #if !defined(OPENSSL_NO_CHACHA) && !defined(OPENSSL_NO_POLY1305)
731 if (strcmp(*argv,"chacha20-poly1305") == 0)
732 doit[D_CHACHA20_POLY1305]=1;
733 else
734 #endif
735 if (strcmp(*argv, "rsa") == 0) {
736 rsa_doit[R_RSA_512] = 1;
737 rsa_doit[R_RSA_1024] = 1;
738 rsa_doit[R_RSA_2048] = 1;
739 rsa_doit[R_RSA_4096] = 1;
740 } else
741 if (strcmp(*argv, "dsa") == 0) {
742 dsa_doit[R_DSA_512] = 1;
743 dsa_doit[R_DSA_1024] = 1;
744 dsa_doit[R_DSA_2048] = 1;
745 } else
746 if (strcmp(*argv, "ecdsap160") == 0)
747 ecdsa_doit[R_EC_P160] = 2;
748 else if (strcmp(*argv, "ecdsap192") == 0)
749 ecdsa_doit[R_EC_P192] = 2;
750 else if (strcmp(*argv, "ecdsap224") == 0)
751 ecdsa_doit[R_EC_P224] = 2;
752 else if (strcmp(*argv, "ecdsap256") == 0)
753 ecdsa_doit[R_EC_P256] = 2;
754 else if (strcmp(*argv, "ecdsap384") == 0)
755 ecdsa_doit[R_EC_P384] = 2;
756 else if (strcmp(*argv, "ecdsap521") == 0)
757 ecdsa_doit[R_EC_P521] = 2;
758 else if (strcmp(*argv, "ecdsak163") == 0)
759 ecdsa_doit[R_EC_K163] = 2;
760 else if (strcmp(*argv, "ecdsak233") == 0)
761 ecdsa_doit[R_EC_K233] = 2;
762 else if (strcmp(*argv, "ecdsak283") == 0)
763 ecdsa_doit[R_EC_K283] = 2;
764 else if (strcmp(*argv, "ecdsak409") == 0)
765 ecdsa_doit[R_EC_K409] = 2;
766 else if (strcmp(*argv, "ecdsak571") == 0)
767 ecdsa_doit[R_EC_K571] = 2;
768 else if (strcmp(*argv, "ecdsab163") == 0)
769 ecdsa_doit[R_EC_B163] = 2;
770 else if (strcmp(*argv, "ecdsab233") == 0)
771 ecdsa_doit[R_EC_B233] = 2;
772 else if (strcmp(*argv, "ecdsab283") == 0)
773 ecdsa_doit[R_EC_B283] = 2;
774 else if (strcmp(*argv, "ecdsab409") == 0)
775 ecdsa_doit[R_EC_B409] = 2;
776 else if (strcmp(*argv, "ecdsab571") == 0)
777 ecdsa_doit[R_EC_B571] = 2;
778 else if (strcmp(*argv, "ecdsa") == 0) {
779 for (i = 0; i < EC_NUM; i++)
780 ecdsa_doit[i] = 1;
781 } else
782 if (strcmp(*argv, "ecdhp160") == 0)
783 ecdh_doit[R_EC_P160] = 2;
784 else if (strcmp(*argv, "ecdhp192") == 0)
785 ecdh_doit[R_EC_P192] = 2;
786 else if (strcmp(*argv, "ecdhp224") == 0)
787 ecdh_doit[R_EC_P224] = 2;
788 else if (strcmp(*argv, "ecdhp256") == 0)
789 ecdh_doit[R_EC_P256] = 2;
790 else if (strcmp(*argv, "ecdhp384") == 0)
791 ecdh_doit[R_EC_P384] = 2;
792 else if (strcmp(*argv, "ecdhp521") == 0)
793 ecdh_doit[R_EC_P521] = 2;
794 else if (strcmp(*argv, "ecdhk163") == 0)
795 ecdh_doit[R_EC_K163] = 2;
796 else if (strcmp(*argv, "ecdhk233") == 0)
797 ecdh_doit[R_EC_K233] = 2;
798 else if (strcmp(*argv, "ecdhk283") == 0)
799 ecdh_doit[R_EC_K283] = 2;
800 else if (strcmp(*argv, "ecdhk409") == 0)
801 ecdh_doit[R_EC_K409] = 2;
802 else if (strcmp(*argv, "ecdhk571") == 0)
803 ecdh_doit[R_EC_K571] = 2;
804 else if (strcmp(*argv, "ecdhb163") == 0)
805 ecdh_doit[R_EC_B163] = 2;
806 else if (strcmp(*argv, "ecdhb233") == 0)
807 ecdh_doit[R_EC_B233] = 2;
808 else if (strcmp(*argv, "ecdhb283") == 0)
809 ecdh_doit[R_EC_B283] = 2;
810 else if (strcmp(*argv, "ecdhb409") == 0)
811 ecdh_doit[R_EC_B409] = 2;
812 else if (strcmp(*argv, "ecdhb571") == 0)
813 ecdh_doit[R_EC_B571] = 2;
814 else if (strcmp(*argv, "ecdh") == 0) {
815 for (i = 0; i < EC_NUM; i++)
816 ecdh_doit[i] = 1;
817 } else
818 {
819 BIO_printf(bio_err, "Error: bad option or value\n");
820 BIO_printf(bio_err, "\n");
821 BIO_printf(bio_err, "Available values:\n");
822 #ifndef OPENSSL_NO_MD4
823 BIO_printf(bio_err, "md4 ");
824 #endif
825 #ifndef OPENSSL_NO_MD5
826 BIO_printf(bio_err, "md5 ");
827 #ifndef OPENSSL_NO_HMAC
828 BIO_printf(bio_err, "hmac ");
829 #endif
830 #endif
831 #ifndef OPENSSL_NO_SHA1
832 BIO_printf(bio_err, "sha1 ");
833 #endif
834 #ifndef OPENSSL_NO_SHA256
835 BIO_printf(bio_err, "sha256 ");
836 #endif
837 #ifndef OPENSSL_NO_SHA512
838 BIO_printf(bio_err, "sha512 ");
839 #endif
840 #ifndef OPENSSL_NO_WHIRLPOOL
841 BIO_printf(bio_err, "whirlpool");
842 #endif
843 #ifndef OPENSSL_NO_RIPEMD160
844 BIO_printf(bio_err, "rmd160");
845 #endif
846 #if !defined(OPENSSL_NO_MD2) || \
847 !defined(OPENSSL_NO_MD4) || !defined(OPENSSL_NO_MD5) || \
848 !defined(OPENSSL_NO_SHA1) || !defined(OPENSSL_NO_RIPEMD160) || \
849 !defined(OPENSSL_NO_WHIRLPOOL)
850 BIO_printf(bio_err, "\n");
851 #endif
852
853 #ifndef OPENSSL_NO_IDEA
854 BIO_printf(bio_err, "idea-cbc ");
855 #endif
856 #ifndef OPENSSL_NO_RC2
857 BIO_printf(bio_err, "rc2-cbc ");
858 #endif
859 #ifndef OPENSSL_NO_BF
860 BIO_printf(bio_err, "bf-cbc ");
861 #endif
862 #ifndef OPENSSL_NO_DES
863 BIO_printf(bio_err, "des-cbc des-ede3\n");
864 #endif
865 #ifndef OPENSSL_NO_AES
866 BIO_printf(bio_err, "aes-128-cbc aes-192-cbc aes-256-cbc ");
867 BIO_printf(bio_err, "aes-128-ige aes-192-ige aes-256-ige\n");
868 BIO_printf(bio_err, "aes-128-gcm aes-256-gcm ");
869 #endif
870 #ifndef OPENSSL_NO_CAMELLIA
871 BIO_printf(bio_err, "\n");
872 BIO_printf(bio_err, "camellia-128-cbc camellia-192-cbc camellia-256-cbc ");
873 #endif
874 #ifndef OPENSSL_NO_RC4
875 BIO_printf(bio_err, "rc4");
876 #endif
877 #if !defined(OPENSSL_NO_CHACHA) && !defined(OPENSSL_NO_POLY1305)
878 BIO_printf(bio_err," chacha20-poly1305");
879 #endif
880 BIO_printf(bio_err, "\n");
881
882 BIO_printf(bio_err, "rsa512 rsa1024 rsa2048 rsa4096\n");
883
884 BIO_printf(bio_err, "dsa512 dsa1024 dsa2048\n");
885 BIO_printf(bio_err, "ecdsap160 ecdsap192 ecdsap224 ecdsap256 ecdsap384 ecdsap521\n");
886 BIO_printf(bio_err, "ecdsak163 ecdsak233 ecdsak283 ecdsak409 ecdsak571\n");
887 BIO_printf(bio_err, "ecdsab163 ecdsab233 ecdsab283 ecdsab409 ecdsab571 ecdsa\n");
888 BIO_printf(bio_err, "ecdhp160 ecdhp192 ecdhp224 ecdhp256 ecdhp384 ecdhp521\n");
889 BIO_printf(bio_err, "ecdhk163 ecdhk233 ecdhk283 ecdhk409 ecdhk571\n");
890 BIO_printf(bio_err, "ecdhb163 ecdhb233 ecdhb283 ecdhb409 ecdhb571 ecdh\n");
891
892 #ifndef OPENSSL_NO_IDEA
893 BIO_printf(bio_err, "idea ");
894 #endif
895 #ifndef OPENSSL_NO_RC2
896 BIO_printf(bio_err, "rc2 ");
897 #endif
898 #ifndef OPENSSL_NO_DES
899 BIO_printf(bio_err, "des ");
900 #endif
901 #ifndef OPENSSL_NO_AES
902 BIO_printf(bio_err, "aes ");
903 #endif
904 #ifndef OPENSSL_NO_CAMELLIA
905 BIO_printf(bio_err, "camellia ");
906 #endif
907 BIO_printf(bio_err, "rsa ");
908 #ifndef OPENSSL_NO_BF
909 BIO_printf(bio_err, "blowfish");
910 #endif
911 #if !defined(OPENSSL_NO_IDEA) || !defined(OPENSSL_NO_SEED) || \
912 !defined(OPENSSL_NO_RC2) || !defined(OPENSSL_NO_DES) || \
913 !defined(OPENSSL_NO_RSA) || !defined(OPENSSL_NO_BF) || \
914 !defined(OPENSSL_NO_AES) || !defined(OPENSSL_NO_CAMELLIA)
915 BIO_printf(bio_err, "\n");
916 #endif
917
918 BIO_printf(bio_err, "\n");
919 BIO_printf(bio_err, "Available options:\n");
920 BIO_printf(bio_err, "-elapsed measure time in real time instead of CPU user time.\n");
921 BIO_printf(bio_err, "-evp e use EVP e.\n");
922 BIO_printf(bio_err, "-decrypt time decryption instead of encryption (only EVP).\n");
923 BIO_printf(bio_err, "-mr produce machine readable output.\n");
924 BIO_printf(bio_err, "-multi n run n benchmarks in parallel.\n");
925 goto end;
926 }
927 argc--;
928 argv++;
929 j++;
930 }
931
932 if (multi && do_multi(multi))
933 goto show_res;
934
935 if (j == 0) {
936 for (i = 0; i < ALGOR_NUM; i++) {
937 if (i != D_EVP)
938 doit[i] = 1;
939 }
940 for (i = 0; i < RSA_NUM; i++)
941 rsa_doit[i] = 1;
942 for (i = 0; i < DSA_NUM; i++)
943 dsa_doit[i] = 1;
944 for (i = 0; i < EC_NUM; i++)
945 ecdsa_doit[i] = 1;
946 for (i = 0; i < EC_NUM; i++)
947 ecdh_doit[i] = 1;
948 }
949 for (i = 0; i < ALGOR_NUM; i++)
950 if (doit[i])
951 pr_header++;
952
953 if (usertime == 0 && !mr)
954 BIO_printf(bio_err, "You have chosen to measure elapsed time instead of user CPU time.\n");
955
956 for (i = 0; i < RSA_NUM; i++) {
957 const unsigned char *p;
958
959 p = rsa_data[i];
960 rsa_key[i] = d2i_RSAPrivateKey(NULL, &p, rsa_data_length[i]);
961 if (rsa_key[i] == NULL) {
962 BIO_printf(bio_err, "internal error loading RSA key number %d\n", i);
963 goto end;
964 }
965 }
966
967 dsa_key[0] = get_dsa512();
968 dsa_key[1] = get_dsa1024();
969 dsa_key[2] = get_dsa2048();
970
971 #ifndef OPENSSL_NO_DES
972 DES_set_key_unchecked(&key, &sch);
973 DES_set_key_unchecked(&key2, &sch2);
974 DES_set_key_unchecked(&key3, &sch3);
975 #endif
976 #ifndef OPENSSL_NO_AES
977 AES_set_encrypt_key(key16, 128, &aes_ks1);
978 AES_set_encrypt_key(key24, 192, &aes_ks2);
979 AES_set_encrypt_key(key32, 256, &aes_ks3);
980 #endif
981 #ifndef OPENSSL_NO_CAMELLIA
982 Camellia_set_key(key16, 128, &camellia_ks1);
983 Camellia_set_key(ckey24, 192, &camellia_ks2);
984 Camellia_set_key(ckey32, 256, &camellia_ks3);
985 #endif
986 #ifndef OPENSSL_NO_IDEA
987 idea_set_encrypt_key(key16, &idea_ks);
988 #endif
989 #ifndef OPENSSL_NO_RC4
990 RC4_set_key(&rc4_ks, 16, key16);
991 #endif
992 #ifndef OPENSSL_NO_RC2
993 RC2_set_key(&rc2_ks, 16, key16, 128);
994 #endif
995 #ifndef OPENSSL_NO_BF
996 BF_set_key(&bf_ks, 16, key16);
997 #endif
998 #ifndef OPENSSL_NO_CAST
999 CAST_set_key(&cast_ks, 16, key16);
1000 #endif
1001 memset(rsa_c, 0, sizeof(rsa_c));
1002 #define COND(c) (run && count<0x7fffffff)
1003 #define COUNT(d) (count)
1004 signal(SIGALRM, sig_done);
1005
1006 #ifndef OPENSSL_NO_MD4
1007 if (doit[D_MD4]) {
1008 for (j = 0; j < SIZE_NUM; j++) {
1009 print_message(names[D_MD4], c[D_MD4][j], lengths[j]);
1010 Time_F(START);
1011 for (count = 0, run = 1; COND(c[D_MD4][j]); count++)
1012 EVP_Digest(&(buf[0]), (unsigned long) lengths[j], &(md4[0]), NULL, EVP_md4(), NULL);
1013 d = Time_F(STOP);
1014 print_result(D_MD4, j, count, d);
1015 }
1016 }
1017 #endif
1018
1019 #ifndef OPENSSL_NO_MD5
1020 if (doit[D_MD5]) {
1021 for (j = 0; j < SIZE_NUM; j++) {
1022 print_message(names[D_MD5], c[D_MD5][j], lengths[j]);
1023 Time_F(START);
1024 for (count = 0, run = 1; COND(c[D_MD5][j]); count++)
1025 EVP_Digest(&(buf[0]), (unsigned long) lengths[j], &(md5[0]), NULL, EVP_get_digestbyname("md5"), NULL);
1026 d = Time_F(STOP);
1027 print_result(D_MD5, j, count, d);
1028 }
1029 }
1030 #endif
1031
1032 #if !defined(OPENSSL_NO_MD5) && !defined(OPENSSL_NO_HMAC)
1033 if (doit[D_HMAC]) {
1034 HMAC_CTX hctx;
1035
1036 HMAC_CTX_init(&hctx);
1037 HMAC_Init_ex(&hctx, (unsigned char *) "This is a key...",
1038 16, EVP_md5(), NULL);
1039
1040 for (j = 0; j < SIZE_NUM; j++) {
1041 print_message(names[D_HMAC], c[D_HMAC][j], lengths[j]);
1042 Time_F(START);
1043 for (count = 0, run = 1; COND(c[D_HMAC][j]); count++) {
1044 HMAC_Init_ex(&hctx, NULL, 0, NULL, NULL);
1045 HMAC_Update(&hctx, buf, lengths[j]);
1046 HMAC_Final(&hctx, &(hmac[0]), NULL);
1047 }
1048 d = Time_F(STOP);
1049 print_result(D_HMAC, j, count, d);
1050 }
1051 HMAC_CTX_cleanup(&hctx);
1052 }
1053 #endif
1054 #ifndef OPENSSL_NO_SHA
1055 if (doit[D_SHA1]) {
1056 for (j = 0; j < SIZE_NUM; j++) {
1057 print_message(names[D_SHA1], c[D_SHA1][j], lengths[j]);
1058 Time_F(START);
1059 for (count = 0, run = 1; COND(c[D_SHA1][j]); count++)
1060 EVP_Digest(buf, (unsigned long) lengths[j], &(sha[0]), NULL, EVP_sha1(), NULL);
1061 d = Time_F(STOP);
1062 print_result(D_SHA1, j, count, d);
1063 }
1064 }
1065 #ifndef OPENSSL_NO_SHA256
1066 if (doit[D_SHA256]) {
1067 for (j = 0; j < SIZE_NUM; j++) {
1068 print_message(names[D_SHA256], c[D_SHA256][j], lengths[j]);
1069 Time_F(START);
1070 for (count = 0, run = 1; COND(c[D_SHA256][j]); count++)
1071 SHA256(buf, lengths[j], sha256);
1072 d = Time_F(STOP);
1073 print_result(D_SHA256, j, count, d);
1074 }
1075 }
1076 #endif
1077
1078 #ifndef OPENSSL_NO_SHA512
1079 if (doit[D_SHA512]) {
1080 for (j = 0; j < SIZE_NUM; j++) {
1081 print_message(names[D_SHA512], c[D_SHA512][j], lengths[j]);
1082 Time_F(START);
1083 for (count = 0, run = 1; COND(c[D_SHA512][j]); count++)
1084 SHA512(buf, lengths[j], sha512);
1085 d = Time_F(STOP);
1086 print_result(D_SHA512, j, count, d);
1087 }
1088 }
1089 #endif
1090 #endif
1091
1092 #ifndef OPENSSL_NO_WHIRLPOOL
1093 if (doit[D_WHIRLPOOL]) {
1094 for (j = 0; j < SIZE_NUM; j++) {
1095 print_message(names[D_WHIRLPOOL], c[D_WHIRLPOOL][j], lengths[j]);
1096 Time_F(START);
1097 for (count = 0, run = 1; COND(c[D_WHIRLPOOL][j]); count++)
1098 WHIRLPOOL(buf, lengths[j], whirlpool);
1099 d = Time_F(STOP);
1100 print_result(D_WHIRLPOOL, j, count, d);
1101 }
1102 }
1103 #endif
1104
1105 #ifndef OPENSSL_NO_RIPEMD
1106 if (doit[D_RMD160]) {
1107 for (j = 0; j < SIZE_NUM; j++) {
1108 print_message(names[D_RMD160], c[D_RMD160][j], lengths[j]);
1109 Time_F(START);
1110 for (count = 0, run = 1; COND(c[D_RMD160][j]); count++)
1111 EVP_Digest(buf, (unsigned long) lengths[j], &(rmd160[0]), NULL, EVP_ripemd160(), NULL);
1112 d = Time_F(STOP);
1113 print_result(D_RMD160, j, count, d);
1114 }
1115 }
1116 #endif
1117 #ifndef OPENSSL_NO_RC4
1118 if (doit[D_RC4]) {
1119 for (j = 0; j < SIZE_NUM; j++) {
1120 print_message(names[D_RC4], c[D_RC4][j], lengths[j]);
1121 Time_F(START);
1122 for (count = 0, run = 1; COND(c[D_RC4][j]); count++)
1123 RC4(&rc4_ks, (unsigned int) lengths[j],
1124 buf, buf);
1125 d = Time_F(STOP);
1126 print_result(D_RC4, j, count, d);
1127 }
1128 }
1129 #endif
1130 #ifndef OPENSSL_NO_DES
1131 if (doit[D_CBC_DES]) {
1132 for (j = 0; j < SIZE_NUM; j++) {
1133 print_message(names[D_CBC_DES], c[D_CBC_DES][j], lengths[j]);
1134 Time_F(START);
1135 for (count = 0, run = 1; COND(c[D_CBC_DES][j]); count++)
1136 DES_ncbc_encrypt(buf, buf, lengths[j], &sch,
1137 &DES_iv, DES_ENCRYPT);
1138 d = Time_F(STOP);
1139 print_result(D_CBC_DES, j, count, d);
1140 }
1141 }
1142 if (doit[D_EDE3_DES]) {
1143 for (j = 0; j < SIZE_NUM; j++) {
1144 print_message(names[D_EDE3_DES], c[D_EDE3_DES][j], lengths[j]);
1145 Time_F(START);
1146 for (count = 0, run = 1; COND(c[D_EDE3_DES][j]); count++)
1147 DES_ede3_cbc_encrypt(buf, buf, lengths[j],
1148 &sch, &sch2, &sch3,
1149 &DES_iv, DES_ENCRYPT);
1150 d = Time_F(STOP);
1151 print_result(D_EDE3_DES, j, count, d);
1152 }
1153 }
1154 #endif
1155 #ifndef OPENSSL_NO_AES
1156 if (doit[D_CBC_128_AES]) {
1157 for (j = 0; j < SIZE_NUM; j++) {
1158 print_message(names[D_CBC_128_AES], c[D_CBC_128_AES][j], lengths[j]);
1159 Time_F(START);
1160 for (count = 0, run = 1; COND(c[D_CBC_128_AES][j]); count++)
1161 AES_cbc_encrypt(buf, buf,
1162 (unsigned long) lengths[j], &aes_ks1,
1163 iv, AES_ENCRYPT);
1164 d = Time_F(STOP);
1165 print_result(D_CBC_128_AES, j, count, d);
1166 }
1167 }
1168 if (doit[D_CBC_192_AES]) {
1169 for (j = 0; j < SIZE_NUM; j++) {
1170 print_message(names[D_CBC_192_AES], c[D_CBC_192_AES][j], lengths[j]);
1171 Time_F(START);
1172 for (count = 0, run = 1; COND(c[D_CBC_192_AES][j]); count++)
1173 AES_cbc_encrypt(buf, buf,
1174 (unsigned long) lengths[j], &aes_ks2,
1175 iv, AES_ENCRYPT);
1176 d = Time_F(STOP);
1177 print_result(D_CBC_192_AES, j, count, d);
1178 }
1179 }
1180 if (doit[D_CBC_256_AES]) {
1181 for (j = 0; j < SIZE_NUM; j++) {
1182 print_message(names[D_CBC_256_AES], c[D_CBC_256_AES][j], lengths[j]);
1183 Time_F(START);
1184 for (count = 0, run = 1; COND(c[D_CBC_256_AES][j]); count++)
1185 AES_cbc_encrypt(buf, buf,
1186 (unsigned long) lengths[j], &aes_ks3,
1187 iv, AES_ENCRYPT);
1188 d = Time_F(STOP);
1189 print_result(D_CBC_256_AES, j, count, d);
1190 }
1191 }
1192 if (doit[D_IGE_128_AES]) {
1193 for (j = 0; j < SIZE_NUM; j++) {
1194 print_message(names[D_IGE_128_AES], c[D_IGE_128_AES][j], lengths[j]);
1195 Time_F(START);
1196 for (count = 0, run = 1; COND(c[D_IGE_128_AES][j]); count++)
1197 AES_ige_encrypt(buf, buf2,
1198 (unsigned long) lengths[j], &aes_ks1,
1199 iv, AES_ENCRYPT);
1200 d = Time_F(STOP);
1201 print_result(D_IGE_128_AES, j, count, d);
1202 }
1203 }
1204 if (doit[D_IGE_192_AES]) {
1205 for (j = 0; j < SIZE_NUM; j++) {
1206 print_message(names[D_IGE_192_AES], c[D_IGE_192_AES][j], lengths[j]);
1207 Time_F(START);
1208 for (count = 0, run = 1; COND(c[D_IGE_192_AES][j]); count++)
1209 AES_ige_encrypt(buf, buf2,
1210 (unsigned long) lengths[j], &aes_ks2,
1211 iv, AES_ENCRYPT);
1212 d = Time_F(STOP);
1213 print_result(D_IGE_192_AES, j, count, d);
1214 }
1215 }
1216 if (doit[D_IGE_256_AES]) {
1217 for (j = 0; j < SIZE_NUM; j++) {
1218 print_message(names[D_IGE_256_AES], c[D_IGE_256_AES][j], lengths[j]);
1219 Time_F(START);
1220 for (count = 0, run = 1; COND(c[D_IGE_256_AES][j]); count++)
1221 AES_ige_encrypt(buf, buf2,
1222 (unsigned long) lengths[j], &aes_ks3,
1223 iv, AES_ENCRYPT);
1224 d = Time_F(STOP);
1225 print_result(D_IGE_256_AES, j, count, d);
1226 }
1227 }
1228 if (doit[D_GHASH]) {
1229 GCM128_CONTEXT *ctx = CRYPTO_gcm128_new(&aes_ks1, (block128_f) AES_encrypt);
1230 CRYPTO_gcm128_setiv(ctx, (unsigned char *) "0123456789ab", 12);
1231
1232 for (j = 0; j < SIZE_NUM; j++) {
1233 print_message(names[D_GHASH], c[D_GHASH][j], lengths[j]);
1234 Time_F(START);
1235 for (count = 0, run = 1; COND(c[D_GHASH][j]); count++)
1236 CRYPTO_gcm128_aad(ctx, buf, lengths[j]);
1237 d = Time_F(STOP);
1238 print_result(D_GHASH, j, count, d);
1239 }
1240 CRYPTO_gcm128_release(ctx);
1241 }
1242 if (doit[D_AES_128_GCM]) {
1243 const EVP_AEAD *aead = EVP_aead_aes_128_gcm();
1244 static const unsigned char nonce[32] = {0};
1245 size_t buf_len, nonce_len;
1246 EVP_AEAD_CTX ctx;
1247
1248 EVP_AEAD_CTX_init(&ctx, aead, key32, EVP_AEAD_key_length(aead),
1249 EVP_AEAD_DEFAULT_TAG_LENGTH, NULL);
1250 nonce_len = EVP_AEAD_nonce_length(aead);
1251
1252 for (j = 0; j < SIZE_NUM; j++) {
1253 print_message(names[D_AES_128_GCM],c[D_AES_128_GCM][j],lengths[j]);
1254 Time_F(START);
1255 for (count = 0, run = 1; COND(c[D_AES_128_GCM][j]); count++)
1256 EVP_AEAD_CTX_seal(&ctx, buf, &buf_len, BUFSIZE, nonce,
1257 nonce_len, buf, lengths[j], NULL, 0);
1258 d=Time_F(STOP);
1259 print_result(D_AES_128_GCM,j,count,d);
1260 }
1261 EVP_AEAD_CTX_cleanup(&ctx);
1262 }
1263
1264 if (doit[D_AES_256_GCM]) {
1265 const EVP_AEAD *aead = EVP_aead_aes_256_gcm();
1266 static const unsigned char nonce[32] = {0};
1267 size_t buf_len, nonce_len;
1268 EVP_AEAD_CTX ctx;
1269
1270 EVP_AEAD_CTX_init(&ctx, aead, key32, EVP_AEAD_key_length(aead),
1271 EVP_AEAD_DEFAULT_TAG_LENGTH, NULL);
1272 nonce_len = EVP_AEAD_nonce_length(aead);
1273
1274 for (j = 0; j < SIZE_NUM; j++) {
1275 print_message(names[D_AES_256_GCM],c[D_AES_256_GCM][j],lengths[j]);
1276 Time_F(START);
1277 for (count = 0, run = 1; COND(c[D_AES_256_GCM][j]); count++)
1278 EVP_AEAD_CTX_seal(&ctx, buf, &buf_len, BUFSIZE, nonce,
1279 nonce_len, buf, lengths[j], NULL, 0);
1280 d=Time_F(STOP);
1281 print_result(D_AES_256_GCM, j, count, d);
1282 }
1283 EVP_AEAD_CTX_cleanup(&ctx);
1284 }
1285 #endif
1286 #if !defined(OPENSSL_NO_CHACHA) && !defined(OPENSSL_NO_POLY1305)
1287 if (doit[D_CHACHA20_POLY1305]) {
1288 const EVP_AEAD *aead = EVP_aead_chacha20_poly1305();
1289 static const unsigned char nonce[32] = {0};
1290 size_t buf_len, nonce_len;
1291 EVP_AEAD_CTX ctx;
1292
1293 EVP_AEAD_CTX_init(&ctx, aead, key32, EVP_AEAD_key_length(aead),
1294 EVP_AEAD_DEFAULT_TAG_LENGTH, NULL);
1295 nonce_len = EVP_AEAD_nonce_length(aead);
1296
1297 for (j = 0; j < SIZE_NUM; j++) {
1298 print_message(names[D_CHACHA20_POLY1305],
1299 c[D_CHACHA20_POLY1305][j], lengths[j]);
1300 Time_F(START);
1301 for (count = 0, run = 1; COND(c[D_CHACHA20_POLY1305][j]); count++)
1302 EVP_AEAD_CTX_seal(&ctx, buf, &buf_len, BUFSIZE, nonce,
1303 nonce_len, buf, lengths[j], NULL, 0);
1304 d=Time_F(STOP);
1305 print_result(D_CHACHA20_POLY1305, j, count, d);
1306 }
1307 EVP_AEAD_CTX_cleanup(&ctx);
1308 }
1309 #endif
1310 #ifndef OPENSSL_NO_CAMELLIA
1311 if (doit[D_CBC_128_CML]) {
1312 for (j = 0; j < SIZE_NUM; j++) {
1313 print_message(names[D_CBC_128_CML], c[D_CBC_128_CML][j], lengths[j]);
1314 Time_F(START);
1315 for (count = 0, run = 1; COND(c[D_CBC_128_CML][j]); count++)
1316 Camellia_cbc_encrypt(buf, buf,
1317 (unsigned long) lengths[j], &camellia_ks1,
1318 iv, CAMELLIA_ENCRYPT);
1319 d = Time_F(STOP);
1320 print_result(D_CBC_128_CML, j, count, d);
1321 }
1322 }
1323 if (doit[D_CBC_192_CML]) {
1324 for (j = 0; j < SIZE_NUM; j++) {
1325 print_message(names[D_CBC_192_CML], c[D_CBC_192_CML][j], lengths[j]);
1326 Time_F(START);
1327 for (count = 0, run = 1; COND(c[D_CBC_192_CML][j]); count++)
1328 Camellia_cbc_encrypt(buf, buf,
1329 (unsigned long) lengths[j], &camellia_ks2,
1330 iv, CAMELLIA_ENCRYPT);
1331 d = Time_F(STOP);
1332 print_result(D_CBC_192_CML, j, count, d);
1333 }
1334 }
1335 if (doit[D_CBC_256_CML]) {
1336 for (j = 0; j < SIZE_NUM; j++) {
1337 print_message(names[D_CBC_256_CML], c[D_CBC_256_CML][j], lengths[j]);
1338 Time_F(START);
1339 for (count = 0, run = 1; COND(c[D_CBC_256_CML][j]); count++)
1340 Camellia_cbc_encrypt(buf, buf,
1341 (unsigned long) lengths[j], &camellia_ks3,
1342 iv, CAMELLIA_ENCRYPT);
1343 d = Time_F(STOP);
1344 print_result(D_CBC_256_CML, j, count, d);
1345 }
1346 }
1347 #endif
1348 #ifndef OPENSSL_NO_IDEA
1349 if (doit[D_CBC_IDEA]) {
1350 for (j = 0; j < SIZE_NUM; j++) {
1351 print_message(names[D_CBC_IDEA], c[D_CBC_IDEA][j], lengths[j]);
1352 Time_F(START);
1353 for (count = 0, run = 1; COND(c[D_CBC_IDEA][j]); count++)
1354 idea_cbc_encrypt(buf, buf,
1355 (unsigned long) lengths[j], &idea_ks,
1356 iv, IDEA_ENCRYPT);
1357 d = Time_F(STOP);
1358 print_result(D_CBC_IDEA, j, count, d);
1359 }
1360 }
1361 #endif
1362 #ifndef OPENSSL_NO_RC2
1363 if (doit[D_CBC_RC2]) {
1364 for (j = 0; j < SIZE_NUM; j++) {
1365 print_message(names[D_CBC_RC2], c[D_CBC_RC2][j], lengths[j]);
1366 Time_F(START);
1367 for (count = 0, run = 1; COND(c[D_CBC_RC2][j]); count++)
1368 RC2_cbc_encrypt(buf, buf,
1369 (unsigned long) lengths[j], &rc2_ks,
1370 iv, RC2_ENCRYPT);
1371 d = Time_F(STOP);
1372 print_result(D_CBC_RC2, j, count, d);
1373 }
1374 }
1375 #endif
1376 #ifndef OPENSSL_NO_BF
1377 if (doit[D_CBC_BF]) {
1378 for (j = 0; j < SIZE_NUM; j++) {
1379 print_message(names[D_CBC_BF], c[D_CBC_BF][j], lengths[j]);
1380 Time_F(START);
1381 for (count = 0, run = 1; COND(c[D_CBC_BF][j]); count++)
1382 BF_cbc_encrypt(buf, buf,
1383 (unsigned long) lengths[j], &bf_ks,
1384 iv, BF_ENCRYPT);
1385 d = Time_F(STOP);
1386 print_result(D_CBC_BF, j, count, d);
1387 }
1388 }
1389 #endif
1390 #ifndef OPENSSL_NO_CAST
1391 if (doit[D_CBC_CAST]) {
1392 for (j = 0; j < SIZE_NUM; j++) {
1393 print_message(names[D_CBC_CAST], c[D_CBC_CAST][j], lengths[j]);
1394 Time_F(START);
1395 for (count = 0, run = 1; COND(c[D_CBC_CAST][j]); count++)
1396 CAST_cbc_encrypt(buf, buf,
1397 (unsigned long) lengths[j], &cast_ks,
1398 iv, CAST_ENCRYPT);
1399 d = Time_F(STOP);
1400 print_result(D_CBC_CAST, j, count, d);
1401 }
1402 }
1403 #endif
1404
1405 if (doit[D_EVP]) {
1406 for (j = 0; j < SIZE_NUM; j++) {
1407 if (evp_cipher) {
1408 EVP_CIPHER_CTX ctx;
1409 int outl;
1410
1411 names[D_EVP] = OBJ_nid2ln(evp_cipher->nid);
1412 /*
1413 * -O3 -fschedule-insns messes up an
1414 * optimization here! names[D_EVP] somehow
1415 * becomes NULL
1416 */
1417 print_message(names[D_EVP], save_count,
1418 lengths[j]);
1419
1420 EVP_CIPHER_CTX_init(&ctx);
1421 if (decrypt)
1422 EVP_DecryptInit_ex(&ctx, evp_cipher, NULL, key16, iv);
1423 else
1424 EVP_EncryptInit_ex(&ctx, evp_cipher, NULL, key16, iv);
1425 EVP_CIPHER_CTX_set_padding(&ctx, 0);
1426
1427 Time_F(START);
1428 if (decrypt)
1429 for (count = 0, run = 1; COND(save_count * 4 * lengths[0] / lengths[j]); count++)
1430 EVP_DecryptUpdate(&ctx, buf, &outl, buf, lengths[j]);
1431 else
1432 for (count = 0, run = 1; COND(save_count * 4 * lengths[0] / lengths[j]); count++)
1433 EVP_EncryptUpdate(&ctx, buf, &outl, buf, lengths[j]);
1434 if (decrypt)
1435 EVP_DecryptFinal_ex(&ctx, buf, &outl);
1436 else
1437 EVP_EncryptFinal_ex(&ctx, buf, &outl);
1438 d = Time_F(STOP);
1439 EVP_CIPHER_CTX_cleanup(&ctx);
1440 }
1441 if (evp_md) {
1442 names[D_EVP] = OBJ_nid2ln(evp_md->type);
1443 print_message(names[D_EVP], save_count,
1444 lengths[j]);
1445
1446 Time_F(START);
1447 for (count = 0, run = 1; COND(save_count * 4 * lengths[0] / lengths[j]); count++)
1448 EVP_Digest(buf, lengths[j], &(md[0]), NULL, evp_md, NULL);
1449
1450 d = Time_F(STOP);
1451 }
1452 print_result(D_EVP, j, count, d);
1453 }
1454 }
1455 arc4random_buf(buf, 36);
1456 for (j = 0; j < RSA_NUM; j++) {
1457 int ret;
1458 if (!rsa_doit[j])
1459 continue;
1460 ret = RSA_sign(NID_md5_sha1, buf, 36, buf2, &rsa_num, rsa_key[j]);
1461 if (ret == 0) {
1462 BIO_printf(bio_err, "RSA sign failure. No RSA sign will be done.\n");
1463 ERR_print_errors(bio_err);
1464 rsa_count = 1;
1465 } else {
1466 pkey_print_message("private", "rsa",
1467 rsa_c[j][0], rsa_bits[j],
1468 RSA_SECONDS);
1469 /* RSA_blinding_on(rsa_key[j],NULL); */
1470 Time_F(START);
1471 for (count = 0, run = 1; COND(rsa_c[j][0]); count++) {
1472 ret = RSA_sign(NID_md5_sha1, buf, 36, buf2,
1473 &rsa_num, rsa_key[j]);
1474 if (ret == 0) {
1475 BIO_printf(bio_err,
1476 "RSA sign failure\n");
1477 ERR_print_errors(bio_err);
1478 count = 1;
1479 break;
1480 }
1481 }
1482 d = Time_F(STOP);
1483 BIO_printf(bio_err, mr ? "+R1:%ld:%d:%.2f\n"
1484 : "%ld %d bit private RSA's in %.2fs\n",
1485 count, rsa_bits[j], d);
1486 rsa_results[j][0] = d / (double) count;
1487 rsa_count = count;
1488 }
1489
1490 ret = RSA_verify(NID_md5_sha1, buf, 36, buf2, rsa_num, rsa_key[j]);
1491 if (ret <= 0) {
1492 BIO_printf(bio_err, "RSA verify failure. No RSA verify will be done.\n");
1493 ERR_print_errors(bio_err);
1494 rsa_doit[j] = 0;
1495 } else {
1496 pkey_print_message("public", "rsa",
1497 rsa_c[j][1], rsa_bits[j],
1498 RSA_SECONDS);
1499 Time_F(START);
1500 for (count = 0, run = 1; COND(rsa_c[j][1]); count++) {
1501 ret = RSA_verify(NID_md5_sha1, buf, 36, buf2,
1502 rsa_num, rsa_key[j]);
1503 if (ret <= 0) {
1504 BIO_printf(bio_err,
1505 "RSA verify failure\n");
1506 ERR_print_errors(bio_err);
1507 count = 1;
1508 break;
1509 }
1510 }
1511 d = Time_F(STOP);
1512 BIO_printf(bio_err, mr ? "+R2:%ld:%d:%.2f\n"
1513 : "%ld %d bit public RSA's in %.2fs\n",
1514 count, rsa_bits[j], d);
1515 rsa_results[j][1] = d / (double) count;
1516 }
1517
1518 if (rsa_count <= 1) {
1519 /* if longer than 10s, don't do any more */
1520 for (j++; j < RSA_NUM; j++)
1521 rsa_doit[j] = 0;
1522 }
1523 }
1524
1525 arc4random_buf(buf, 20);
1526 for (j = 0; j < DSA_NUM; j++) {
1527 unsigned int kk;
1528 int ret;
1529
1530 if (!dsa_doit[j])
1531 continue;
1532 /* DSA_generate_key(dsa_key[j]); */
1533 /* DSA_sign_setup(dsa_key[j],NULL); */
1534 ret = DSA_sign(EVP_PKEY_DSA, buf, 20, buf2,
1535 &kk, dsa_key[j]);
1536 if (ret == 0) {
1537 BIO_printf(bio_err, "DSA sign failure. No DSA sign will be done.\n");
1538 ERR_print_errors(bio_err);
1539 rsa_count = 1;
1540 } else {
1541 pkey_print_message("sign", "dsa",
1542 dsa_c[j][0], dsa_bits[j],
1543 DSA_SECONDS);
1544 Time_F(START);
1545 for (count = 0, run = 1; COND(dsa_c[j][0]); count++) {
1546 ret = DSA_sign(EVP_PKEY_DSA, buf, 20, buf2,
1547 &kk, dsa_key[j]);
1548 if (ret == 0) {
1549 BIO_printf(bio_err,
1550 "DSA sign failure\n");
1551 ERR_print_errors(bio_err);
1552 count = 1;
1553 break;
1554 }
1555 }
1556 d = Time_F(STOP);
1557 BIO_printf(bio_err, mr ? "+R3:%ld:%d:%.2f\n"
1558 : "%ld %d bit DSA signs in %.2fs\n",
1559 count, dsa_bits[j], d);
1560 dsa_results[j][0] = d / (double) count;
1561 rsa_count = count;
1562 }
1563
1564 ret = DSA_verify(EVP_PKEY_DSA, buf, 20, buf2,
1565 kk, dsa_key[j]);
1566 if (ret <= 0) {
1567 BIO_printf(bio_err, "DSA verify failure. No DSA verify will be done.\n");
1568 ERR_print_errors(bio_err);
1569 dsa_doit[j] = 0;
1570 } else {
1571 pkey_print_message("verify", "dsa",
1572 dsa_c[j][1], dsa_bits[j],
1573 DSA_SECONDS);
1574 Time_F(START);
1575 for (count = 0, run = 1; COND(dsa_c[j][1]); count++) {
1576 ret = DSA_verify(EVP_PKEY_DSA, buf, 20, buf2,
1577 kk, dsa_key[j]);
1578 if (ret <= 0) {
1579 BIO_printf(bio_err,
1580 "DSA verify failure\n");
1581 ERR_print_errors(bio_err);
1582 count = 1;
1583 break;
1584 }
1585 }
1586 d = Time_F(STOP);
1587 BIO_printf(bio_err, mr ? "+R4:%ld:%d:%.2f\n"
1588 : "%ld %d bit DSA verify in %.2fs\n",
1589 count, dsa_bits[j], d);
1590 dsa_results[j][1] = d / (double) count;
1591 }
1592
1593 if (rsa_count <= 1) {
1594 /* if longer than 10s, don't do any more */
1595 for (j++; j < DSA_NUM; j++)
1596 dsa_doit[j] = 0;
1597 }
1598 }
1599
1600 for (j = 0; j < EC_NUM; j++) {
1601 int ret;
1602
1603 if (!ecdsa_doit[j])
1604 continue; /* Ignore Curve */
1605 ecdsa[j] = EC_KEY_new_by_curve_name(test_curves[j]);
1606 if (ecdsa[j] == NULL) {
1607 BIO_printf(bio_err, "ECDSA failure.\n");
1608 ERR_print_errors(bio_err);
1609 rsa_count = 1;
1610 } else {
1611 EC_KEY_precompute_mult(ecdsa[j], NULL);
1612
1613 /* Perform ECDSA signature test */
1614 EC_KEY_generate_key(ecdsa[j]);
1615 ret = ECDSA_sign(0, buf, 20, ecdsasig,
1616 &ecdsasiglen, ecdsa[j]);
1617 if (ret == 0) {
1618 BIO_printf(bio_err, "ECDSA sign failure. No ECDSA sign will be done.\n");
1619 ERR_print_errors(bio_err);
1620 rsa_count = 1;
1621 } else {
1622 pkey_print_message("sign", "ecdsa",
1623 ecdsa_c[j][0],
1624 test_curves_bits[j],
1625 ECDSA_SECONDS);
1626
1627 Time_F(START);
1628 for (count = 0, run = 1; COND(ecdsa_c[j][0]);
1629 count++) {
1630 ret = ECDSA_sign(0, buf, 20,
1631 ecdsasig, &ecdsasiglen,
1632 ecdsa[j]);
1633 if (ret == 0) {
1634 BIO_printf(bio_err, "ECDSA sign failure\n");
1635 ERR_print_errors(bio_err);
1636 count = 1;
1637 break;
1638 }
1639 }
1640 d = Time_F(STOP);
1641
1642 BIO_printf(bio_err, mr ? "+R5:%ld:%d:%.2f\n" :
1643 "%ld %d bit ECDSA signs in %.2fs \n",
1644 count, test_curves_bits[j], d);
1645 ecdsa_results[j][0] = d / (double) count;
1646 rsa_count = count;
1647 }
1648
1649 /* Perform ECDSA verification test */
1650 ret = ECDSA_verify(0, buf, 20, ecdsasig,
1651 ecdsasiglen, ecdsa[j]);
1652 if (ret != 1) {
1653 BIO_printf(bio_err, "ECDSA verify failure. No ECDSA verify will be done.\n");
1654 ERR_print_errors(bio_err);
1655 ecdsa_doit[j] = 0;
1656 } else {
1657 pkey_print_message("verify", "ecdsa",
1658 ecdsa_c[j][1],
1659 test_curves_bits[j],
1660 ECDSA_SECONDS);
1661 Time_F(START);
1662 for (count = 0, run = 1; COND(ecdsa_c[j][1]); count++) {
1663 ret = ECDSA_verify(0, buf, 20, ecdsasig, ecdsasiglen, ecdsa[j]);
1664 if (ret != 1) {
1665 BIO_printf(bio_err, "ECDSA verify failure\n");
1666 ERR_print_errors(bio_err);
1667 count = 1;
1668 break;
1669 }
1670 }
1671 d = Time_F(STOP);
1672 BIO_printf(bio_err, mr ? "+R6:%ld:%d:%.2f\n"
1673 : "%ld %d bit ECDSA verify in %.2fs\n",
1674 count, test_curves_bits[j], d);
1675 ecdsa_results[j][1] = d / (double) count;
1676 }
1677
1678 if (rsa_count <= 1) {
1679 /* if longer than 10s, don't do any more */
1680 for (j++; j < EC_NUM; j++)
1681 ecdsa_doit[j] = 0;
1682 }
1683 }
1684 }
1685
1686 for (j = 0; j < EC_NUM; j++) {
1687 if (!ecdh_doit[j])
1688 continue;
1689 ecdh_a[j] = EC_KEY_new_by_curve_name(test_curves[j]);
1690 ecdh_b[j] = EC_KEY_new_by_curve_name(test_curves[j]);
1691 if ((ecdh_a[j] == NULL) || (ecdh_b[j] == NULL)) {
1692 BIO_printf(bio_err, "ECDH failure.\n");
1693 ERR_print_errors(bio_err);
1694 rsa_count = 1;
1695 } else {
1696 /* generate two ECDH key pairs */
1697 if (!EC_KEY_generate_key(ecdh_a[j]) ||
1698 !EC_KEY_generate_key(ecdh_b[j])) {
1699 BIO_printf(bio_err, "ECDH key generation failure.\n");
1700 ERR_print_errors(bio_err);
1701 rsa_count = 1;
1702 } else {
1703 /*
1704 * If field size is not more than 24 octets,
1705 * then use SHA-1 hash of result; otherwise,
1706 * use result (see section 4.8 of
1707 * draft-ietf-tls-ecc-03.txt).
1708 */
1709 int field_size, outlen;
1710 void *(*kdf) (const void *in, size_t inlen, void *out, size_t * xoutlen);
1711 field_size = EC_GROUP_get_degree(EC_KEY_get0_group(ecdh_a[j]));
1712 if (field_size <= 24 * 8) {
1713 outlen = KDF1_SHA1_len;
1714 kdf = KDF1_SHA1;
1715 } else {
1716 outlen = (field_size + 7) / 8;
1717 kdf = NULL;
1718 }
1719 secret_size_a = ECDH_compute_key(secret_a, outlen,
1720 EC_KEY_get0_public_key(ecdh_b[j]),
1721 ecdh_a[j], kdf);
1722 secret_size_b = ECDH_compute_key(secret_b, outlen,
1723 EC_KEY_get0_public_key(ecdh_a[j]),
1724 ecdh_b[j], kdf);
1725 if (secret_size_a != secret_size_b)
1726 ecdh_checks = 0;
1727 else
1728 ecdh_checks = 1;
1729
1730 for (secret_idx = 0;
1731 (secret_idx < secret_size_a)
1732 && (ecdh_checks == 1);
1733 secret_idx++) {
1734 if (secret_a[secret_idx] != secret_b[secret_idx])
1735 ecdh_checks = 0;
1736 }
1737
1738 if (ecdh_checks == 0) {
1739 BIO_printf(bio_err,
1740 "ECDH computations don't match.\n");
1741 ERR_print_errors(bio_err);
1742 rsa_count = 1;
1743 } else {
1744 pkey_print_message("", "ecdh",
1745 ecdh_c[j][0],
1746 test_curves_bits[j],
1747 ECDH_SECONDS);
1748 Time_F(START);
1749 for (count = 0, run = 1;
1750 COND(ecdh_c[j][0]); count++) {
1751 ECDH_compute_key(secret_a,
1752 outlen,
1753 EC_KEY_get0_public_key(ecdh_b[j]),
1754 ecdh_a[j], kdf);
1755 }
1756 d = Time_F(STOP);
1757 BIO_printf(bio_err, mr
1758 ? "+R7:%ld:%d:%.2f\n"
1759 : "%ld %d-bit ECDH ops in %.2fs\n",
1760 count, test_curves_bits[j], d);
1761 ecdh_results[j][0] = d / (double) count;
1762 rsa_count = count;
1763 }
1764 }
1765 }
1766
1767
1768 if (rsa_count <= 1) {
1769 /* if longer than 10s, don't do any more */
1770 for (j++; j < EC_NUM; j++)
1771 ecdh_doit[j] = 0;
1772 }
1773 }
1774 show_res:
1775 if (!mr) {
1776 fprintf(stdout, "%s\n", SSLeay_version(SSLEAY_VERSION));
1777 fprintf(stdout, "%s\n", SSLeay_version(SSLEAY_BUILT_ON));
1778 printf("options:");
1779 printf("%s ", BN_options());
1780 #ifndef OPENSSL_NO_RC4
1781 printf("%s ", RC4_options());
1782 #endif
1783 #ifndef OPENSSL_NO_DES
1784 printf("%s ", DES_options());
1785 #endif
1786 #ifndef OPENSSL_NO_AES
1787 printf("%s ", AES_options());
1788 #endif
1789 #ifndef OPENSSL_NO_IDEA
1790 printf("%s ", idea_options());
1791 #endif
1792 #ifndef OPENSSL_NO_BF
1793 printf("%s ", BF_options());
1794 #endif
1795 fprintf(stdout, "\n%s\n", SSLeay_version(SSLEAY_CFLAGS));
1796 }
1797 if (pr_header) {
1798 if (mr)
1799 fprintf(stdout, "+H");
1800 else {
1801 fprintf(stdout, "The 'numbers' are in 1000s of bytes per second processed.\n");
1802 fprintf(stdout, "type ");
1803 }
1804 for (j = 0; j < SIZE_NUM; j++)
1805 fprintf(stdout, mr ? ":%d" : "%7d bytes", lengths[j]);
1806 fprintf(stdout, "\n");
1807 }
1808 for (k = 0; k < ALGOR_NUM; k++) {
1809 if (!doit[k])
1810 continue;
1811 if (mr)
1812 fprintf(stdout, "+F:%d:%s", k, names[k]);
1813 else
1814 fprintf(stdout, "%-13s", names[k]);
1815 for (j = 0; j < SIZE_NUM; j++) {
1816 if (results[k][j] > 10000 && !mr)
1817 fprintf(stdout, " %11.2fk", results[k][j] / 1e3);
1818 else
1819 fprintf(stdout, mr ? ":%.2f" : " %11.2f ", results[k][j]);
1820 }
1821 fprintf(stdout, "\n");
1822 }
1823 j = 1;
1824 for (k = 0; k < RSA_NUM; k++) {
1825 if (!rsa_doit[k])
1826 continue;
1827 if (j && !mr) {
1828 printf("%18ssign verify sign/s verify/s\n", " ");
1829 j = 0;
1830 }
1831 if (mr)
1832 fprintf(stdout, "+F2:%u:%u:%f:%f\n",
1833 k, rsa_bits[k], rsa_results[k][0],
1834 rsa_results[k][1]);
1835 else
1836 fprintf(stdout, "rsa %4u bits %8.6fs %8.6fs %8.1f %8.1f\n",
1837 rsa_bits[k], rsa_results[k][0], rsa_results[k][1],
1838 1.0 / rsa_results[k][0], 1.0 / rsa_results[k][1]);
1839 }
1840 j = 1;
1841 for (k = 0; k < DSA_NUM; k++) {
1842 if (!dsa_doit[k])
1843 continue;
1844 if (j && !mr) {
1845 printf("%18ssign verify sign/s verify/s\n", " ");
1846 j = 0;
1847 }
1848 if (mr)
1849 fprintf(stdout, "+F3:%u:%u:%f:%f\n",
1850 k, dsa_bits[k], dsa_results[k][0], dsa_results[k][1]);
1851 else
1852 fprintf(stdout, "dsa %4u bits %8.6fs %8.6fs %8.1f %8.1f\n",
1853 dsa_bits[k], dsa_results[k][0], dsa_results[k][1],
1854 1.0 / dsa_results[k][0], 1.0 / dsa_results[k][1]);
1855 }
1856 j = 1;
1857 for (k = 0; k < EC_NUM; k++) {
1858 if (!ecdsa_doit[k])
1859 continue;
1860 if (j && !mr) {
1861 printf("%30ssign verify sign/s verify/s\n", " ");
1862 j = 0;
1863 }
1864 if (mr)
1865 fprintf(stdout, "+F4:%u:%u:%f:%f\n",
1866 k, test_curves_bits[k],
1867 ecdsa_results[k][0], ecdsa_results[k][1]);
1868 else
1869 fprintf(stdout,
1870 "%4u bit ecdsa (%s) %8.4fs %8.4fs %8.1f %8.1f\n",
1871 test_curves_bits[k],
1872 test_curves_names[k],
1873 ecdsa_results[k][0], ecdsa_results[k][1],
1874 1.0 / ecdsa_results[k][0], 1.0 / ecdsa_results[k][1]);
1875 }
1876
1877
1878 j = 1;
1879 for (k = 0; k < EC_NUM; k++) {
1880 if (!ecdh_doit[k])
1881 continue;
1882 if (j && !mr) {
1883 printf("%30sop op/s\n", " ");
1884 j = 0;
1885 }
1886 if (mr)
1887 fprintf(stdout, "+F5:%u:%u:%f:%f\n",
1888 k, test_curves_bits[k],
1889 ecdh_results[k][0], 1.0 / ecdh_results[k][0]);
1890
1891 else
1892 fprintf(stdout, "%4u bit ecdh (%s) %8.4fs %8.1f\n",
1893 test_curves_bits[k],
1894 test_curves_names[k],
1895 ecdh_results[k][0], 1.0 / ecdh_results[k][0]);
1896 }
1897
1898 mret = 0;
1899
1900 end:
1901 ERR_print_errors(bio_err);
1902 free(buf);
1903 free(buf2);
1904 for (i = 0; i < RSA_NUM; i++)
1905 if (rsa_key[i] != NULL)
1906 RSA_free(rsa_key[i]);
1907 for (i = 0; i < DSA_NUM; i++)
1908 if (dsa_key[i] != NULL)
1909 DSA_free(dsa_key[i]);
1910
1911 for (i = 0; i < EC_NUM; i++)
1912 if (ecdsa[i] != NULL)
1913 EC_KEY_free(ecdsa[i]);
1914 for (i = 0; i < EC_NUM; i++) {
1915 if (ecdh_a[i] != NULL)
1916 EC_KEY_free(ecdh_a[i]);
1917 if (ecdh_b[i] != NULL)
1918 EC_KEY_free(ecdh_b[i]);
1919 }
1920
1921
1922 return (mret);
1923 }
1924
1925 static void
1926 print_message(const char *s, long num, int length)
1927 {
1928 BIO_printf(bio_err, mr ? "+DT:%s:%d:%d\n"
1929 : "Doing %s for %ds on %d size blocks: ", s, SECONDS, length);
1930 (void) BIO_flush(bio_err);
1931 alarm(SECONDS);
1932 }
1933
1934 static void
1935 pkey_print_message(const char *str, const char *str2, long num,
1936 int bits, int tm)
1937 {
1938 BIO_printf(bio_err, mr ? "+DTP:%d:%s:%s:%d\n"
1939 : "Doing %d bit %s %s's for %ds: ", bits, str, str2, tm);
1940 (void) BIO_flush(bio_err);
1941 alarm(tm);
1942 }
1943
1944 static void
1945 print_result(int alg, int run_no, int count, double time_used)
1946 {
1947 BIO_printf(bio_err, mr ? "+R:%d:%s:%f\n"
1948 : "%d %s's in %.2fs\n", count, names[alg], time_used);
1949 results[alg][run_no] = ((double) count) / time_used * lengths[run_no];
1950 }
1951
1952 static char *
1953 sstrsep(char **string, const char *delim)
1954 {
1955 char isdelim[256];
1956 char *token = *string;
1957
1958 if (**string == 0)
1959 return NULL;
1960
1961 memset(isdelim, 0, sizeof isdelim);
1962 isdelim[0] = 1;
1963
1964 while (*delim) {
1965 isdelim[(unsigned char) (*delim)] = 1;
1966 delim++;
1967 }
1968
1969 while (!isdelim[(unsigned char) (**string)]) {
1970 (*string)++;
1971 }
1972
1973 if (**string) {
1974 **string = 0;
1975 (*string)++;
1976 }
1977 return token;
1978 }
1979
1980 static int
1981 do_multi(int multi)
1982 {
1983 int n;
1984 int fd[2];
1985 int *fds;
1986 static char sep[] = ":";
1987 const char *errstr = NULL;
1988
1989 fds = reallocarray(NULL, multi, sizeof *fds);
1990 if (fds == NULL) {
1991 fprintf(stderr, "reallocarray failure\n");
1992 exit(1);
1993 }
1994 for (n = 0; n < multi; ++n) {
1995 if (pipe(fd) == -1) {
1996 fprintf(stderr, "pipe failure\n");
1997 exit(1);
1998 }
1999 fflush(stdout);
2000 fflush(stderr);
2001 if (fork()) {
2002 close(fd[1]);
2003 fds[n] = fd[0];
2004 } else {
2005 close(fd[0]);
2006 close(1);
2007 if (dup(fd[1]) == -1) {
2008 fprintf(stderr, "dup failed\n");
2009 exit(1);
2010 }
2011 close(fd[1]);
2012 mr = 1;
2013 usertime = 0;
2014 free(fds);
2015 return 0;
2016 }
2017 printf("Forked child %d\n", n);
2018 }
2019
2020 /* for now, assume the pipe is long enough to take all the output */
2021 for (n = 0; n < multi; ++n) {
2022 FILE *f;
2023 char buf[1024];
2024 char *p;
2025
2026 f = fdopen(fds[n], "r");
2027 while (fgets(buf, sizeof buf, f)) {
2028 p = strchr(buf, '\n');
2029 if (p)
2030 *p = '\0';
2031 if (buf[0] != '+') {
2032 fprintf(stderr, "Don't understand line '%s' from child %d\n",
2033 buf, n);
2034 continue;
2035 }
2036 printf("Got: %s from %d\n", buf, n);
2037 if (!strncmp(buf, "+F:", 3)) {
2038 int alg;
2039 int j;
2040
2041 p = buf + 3;
2042 alg = strtonum(sstrsep(&p, sep),
2043 0, ALGOR_NUM - 1, &errstr);
2044 sstrsep(&p, sep);
2045 for (j = 0; j < SIZE_NUM; ++j)
2046 results[alg][j] += atof(sstrsep(&p, sep));
2047 } else if (!strncmp(buf, "+F2:", 4)) {
2048 int k;
2049 double d;
2050
2051 p = buf + 4;
2052 k = strtonum(sstrsep(&p, sep),
2053 0, ALGOR_NUM - 1, &errstr);
2054 sstrsep(&p, sep);
2055
2056 d = atof(sstrsep(&p, sep));
2057 if (n)
2058 rsa_results[k][0] = 1 / (1 / rsa_results[k][0] + 1 / d);
2059 else
2060 rsa_results[k][0] = d;
2061
2062 d = atof(sstrsep(&p, sep));
2063 if (n)
2064 rsa_results[k][1] = 1 / (1 / rsa_results[k][1] + 1 / d);
2065 else
2066 rsa_results[k][1] = d;
2067 } else if (!strncmp(buf, "+F2:", 4)) {
2068 int k;
2069 double d;
2070
2071 p = buf + 4;
2072 k = strtonum(sstrsep(&p, sep),
2073 0, ALGOR_NUM - 1, &errstr);
2074 sstrsep(&p, sep);
2075
2076 d = atof(sstrsep(&p, sep));
2077 if (n)
2078 rsa_results[k][0] = 1 / (1 / rsa_results[k][0] + 1 / d);
2079 else
2080 rsa_results[k][0] = d;
2081
2082 d = atof(sstrsep(&p, sep));
2083 if (n)
2084 rsa_results[k][1] = 1 / (1 / rsa_results[k][1] + 1 / d);
2085 else
2086 rsa_results[k][1] = d;
2087 }
2088 else if (!strncmp(buf, "+F3:", 4)) {
2089 int k;
2090 double d;
2091
2092 p = buf + 4;
2093 k = strtonum(sstrsep(&p, sep),
2094 0, ALGOR_NUM - 1, &errstr);
2095 sstrsep(&p, sep);
2096
2097 d = atof(sstrsep(&p, sep));
2098 if (n)
2099 dsa_results[k][0] = 1 / (1 / dsa_results[k][0] + 1 / d);
2100 else
2101 dsa_results[k][0] = d;
2102
2103 d = atof(sstrsep(&p, sep));
2104 if (n)
2105 dsa_results[k][1] = 1 / (1 / dsa_results[k][1] + 1 / d);
2106 else
2107 dsa_results[k][1] = d;
2108 }
2109 else if (!strncmp(buf, "+F4:", 4)) {
2110 int k;
2111 double d;
2112
2113 p = buf + 4;
2114 k = strtonum(sstrsep(&p, sep),
2115 0, ALGOR_NUM - 1, &errstr);
2116 sstrsep(&p, sep);
2117
2118 d = atof(sstrsep(&p, sep));
2119 if (n)
2120 ecdsa_results[k][0] = 1 / (1 / ecdsa_results[k][0] + 1 / d);
2121 else
2122 ecdsa_results[k][0] = d;
2123
2124 d = atof(sstrsep(&p, sep));
2125 if (n)
2126 ecdsa_results[k][1] = 1 / (1 / ecdsa_results[k][1] + 1 / d);
2127 else
2128 ecdsa_results[k][1] = d;
2129 }
2130
2131 else if (!strncmp(buf, "+F5:", 4)) {
2132 int k;
2133 double d;
2134
2135 p = buf + 4;
2136 k = strtonum(sstrsep(&p, sep),
2137 0, ALGOR_NUM - 1, &errstr);
2138 sstrsep(&p, sep);
2139
2140 d = atof(sstrsep(&p, sep));
2141 if (n)
2142 ecdh_results[k][0] = 1 / (1 / ecdh_results[k][0] + 1 / d);
2143 else
2144 ecdh_results[k][0] = d;
2145
2146 }
2147
2148 else if (!strncmp(buf, "+H:", 3)) {
2149 } else
2150 fprintf(stderr, "Unknown type '%s' from child %d\n", buf, n);
2151 }
2152
2153 fclose(f);
2154 }
2155 free(fds);
2156 return 1;
2157 }
2158 #endif
Unleashed OS