openssl / openssl/openssl

performance of openssl 1.1.1p vs. 3.1.0

Open
#21,005 10 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

triaged: performance
Dominant language
C
Stars
30.8k
Forks
11.5k
Avg merge
10m
Merged PRs (30d)
1

Description

I compared performance of openssl versions 1.1.1p and 3.1.0 using nginx 1.23.4 as a server and siege 4.1.6 as a client.
I tried three ciphers and in each of these benchmarks, 1.1.1 has better performance.
Is it a well known issue or the tests are not correct?
Thank you!

                         1.1.1  hits     3.1.0 hits
AES256-SHA256                18728       8134
ECDHE-RSA-AES256-GCM-SHA384   16514    16015
ECDHE-ECDSA-AES256-GCM-SHA384   76020     64967

siege command is :

siege  -t1M -b  https://localhost:4411

p.s. All tools have been built with default config options; nginx webserver returns its default page.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing the reported comparison with OpenSSL 1.1.1p and 3.1.0, using nginx 1.23.4, siege 4.1.6, and the supplied siege command. Check the three listed ciphers and default configurations to determine whether the performance difference is reproducible and whether the benchmark setup supports the reported conclusion.

Written by the indexing model from the issue text.

Assessment

Tech stack
c, nginx
Domain
performance, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.