Re: HTTPS trust anchors in sysinst

[Martin Husemann <martin%duskware.de@localhost>]

Here are the numbers for the slowest sparc I have in working condition
(a SparcStation LX), running -current.

I am looking into the core dump, will file a PR for that.

Martin

[/tmp] martin@somnambulist > uname -a
NetBSD somnambulist.duskware.de 10.99.7 NetBSD 10.99.7 (SOMNA) #18: Mon Aug 28 12:28:48 CEST 2023  martin%seven-days-to-the-wolves.aprisoft.de@localhost:/work/src/sys/arch/sparc/compile/SOMNA sparc
[/tmp] martin@somnambulist > fgrep cpu0 /var/run/dmesg.boot 
cpu0 at mainbus0: TI,TMS390S10 @ 50 MHz, on-chip FPU
cpu0: physical 4K instruction (32 b/l), 2K data (16 b/l): cache enabled
[/tmp] martin@somnambulist > openssl speed
Doing md5 for 3s on 16 size blocks: 10115 md5's in 2.88s
Doing md5 for 3s on 64 size blocks: 8977 md5's in 2.96s
Doing md5 for 3s on 256 size blocks: 7055 md5's in 2.77s
Doing md5 for 3s on 1024 size blocks: 4152 md5's in 2.92s
Doing md5 for 3s on 8192 size blocks: 820 md5's in 2.94s
Doing md5 for 3s on 16384 size blocks: 430 md5's in 2.94s
Doing sha1 for 3s on 16 size blocks: 9701 sha1's in 2.93s
Doing sha1 for 3s on 64 size blocks: 7652 sha1's in 2.94s
Doing sha1 for 3s on 256 size blocks: 4666 sha1's in 2.86s
Doing sha1 for 3s on 1024 size blocks: 1947 sha1's in 2.96s
Doing sha1 for 3s on 8192 size blocks: 296 sha1's in 2.89s
Doing sha1 for 3s on 16384 size blocks: 151 sha1's in 2.93s
Doing sha256 for 3s on 16 size blocks: 8731 sha256's in 2.93s
Doing sha256 for 3s on 64 size blocks: 6564 sha256's in 2.90s
Doing sha256 for 3s on 256 size blocks: 3723 sha256's in 2.95s
Doing sha256 for 3s on 1024 size blocks: 1358 sha256's in 2.87s
Doing sha256 for 3s on 8192 size blocks: 197 sha256's in 2.93s
Doing sha256 for 3s on 16384 size blocks: 100 sha256's in 2.88s
Doing sha512 for 3s on 16 size blocks: 4048 sha512's in 2.85s
Doing sha512 for 3s on 64 size blocks: 4151 sha512's in 2.85s
Doing sha512 for 3s on 256 size blocks: 1823 sha512's in 2.95s
Doing sha512 for 3s on 1024 size blocks: 683 sha512's in 2.97s
Doing sha512 for 3s on 8192 size blocks: 101 sha512's in 2.91s
Doing sha512 for 3s on 16384 size blocks: 51 sha512's in 2.97s
Doing rmd160 for 3s on 16 size blocks: 8421 rmd160's in 2.91s
Doing rmd160 for 3s on 64 size blocks: 6190 rmd160's in 2.90s
Doing rmd160 for 3s on 256 size blocks: 3485 rmd160's in 2.94s
Doing rmd160 for 3s on 1024 size blocks: 1262 rmd160's in 2.89s
Doing rmd160 for 3s on 8192 size blocks: 178 rmd160's in 2.86s
Doing rmd160 for 3s on 16384 size blocks: 93 rmd160's in 2.90s
Doing hmac(md5) for 3s on 16 size blocks: 6261 hmac(md5)'s in 2.92s
Doing hmac(md5) for 3s on 64 size blocks: 5673 hmac(md5)'s in 2.90s
Doing hmac(md5) for 3s on 256 size blocks: 4964 hmac(md5)'s in 2.92s
Doing hmac(md5) for 3s on 1024 size blocks: 3264 hmac(md5)'s in 2.92s
Doing hmac(md5) for 3s on 8192 size blocks: 778 hmac(md5)'s in 2.90s
Doing hmac(md5) for 3s on 16384 size blocks: 417 hmac(md5)'s in 2.95s
Doing des-ede3 for 3s on 16 size blocks: 9392 des-ede3's in 2.85s
Doing des-ede3 for 3s on 64 size blocks: 2786 des-ede3's in 2.91s
Doing des-ede3 for 3s on 256 size blocks: 707 des-ede3's in 2.82s
Doing des-ede3 for 3s on 1024 size blocks: 185 des-ede3's in 2.92s
Doing des-ede3 for 3s on 8192 size blocks: 24 des-ede3's in 3.07s
Doing des-ede3 for 3s on 16384 size blocks: 12 des-ede3's in 2.95s
Doing aes-128-cbc for 3s on 16 size blocks: 56082 aes-128-cbc's in 2.89s
Doing aes-128-cbc for 3s on 64 size blocks: 16254 aes-128-cbc's in 2.89s
Doing aes-128-cbc for 3s on 256 size blocks: 4353 aes-128-cbc's in 2.93s
Doing aes-128-cbc for 3s on 1024 size blocks: 1122 aes-128-cbc's in 2.93s
Doing aes-128-cbc for 3s on 8192 size blocks: 143 aes-128-cbc's in 2.99s
Doing aes-128-cbc for 3s on 16384 size blocks: 72 aes-128-cbc's in 2.96s
Doing aes-192-cbc for 3s on 16 size blocks: 47184 aes-192-cbc's in 2.82s
Doing aes-192-cbc for 3s on 64 size blocks: 14050 aes-192-cbc's in 2.93s
Doing aes-192-cbc for 3s on 256 size blocks: 3739 aes-192-cbc's in 2.92s
Doing aes-192-cbc for 3s on 1024 size blocks: 957 aes-192-cbc's in 2.87s
Doing aes-192-cbc for 3s on 8192 size blocks: 122 aes-192-cbc's in 2.93s
Doing aes-192-cbc for 3s on 16384 size blocks: 61 aes-192-cbc's in 2.95s
Doing aes-256-cbc for 3s on 16 size blocks: 42920 aes-256-cbc's in 2.89s
Doing aes-256-cbc for 3s on 64 size blocks: 12383 aes-256-cbc's in 2.91s
Doing aes-256-cbc for 3s on 256 size blocks: 3287 aes-256-cbc's in 2.93s
Doing aes-256-cbc for 3s on 1024 size blocks: 839 aes-256-cbc's in 2.89s
Doing aes-256-cbc for 3s on 8192 size blocks: 104 aes-256-cbc's in 2.87s
Doing aes-256-cbc for 3s on 16384 size blocks: 53 aes-256-cbc's in 2.92s
Doing camellia-128-cbc for 3s on 16 size blocks: 47167 camellia-128-cbc's in 2.91s
Doing camellia-128-cbc for 3s on 64 size blocks: 14063 camellia-128-cbc's in 2.88s
Doing camellia-128-cbc for 3s on 256 size blocks: 3811 camellia-128-cbc's in 2.93s
Doing camellia-128-cbc for 3s on 1024 size blocks: 974 camellia-128-cbc's in 2.93s
Doing camellia-128-cbc for 3s on 8192 size blocks: 124 camellia-128-cbc's in 2.93s
Doing camellia-128-cbc for 3s on 16384 size blocks: 62 camellia-128-cbc's in 2.95s
Doing camellia-192-cbc for 3s on 16 size blocks: 38289 camellia-192-cbc's in 2.87s
Doing camellia-192-cbc for 3s on 64 size blocks: 10859 camellia-192-cbc's in 2.82s
Doing camellia-192-cbc for 3s on 256 size blocks: 2990 camellia-192-cbc's in 2.95s
Doing camellia-192-cbc for 3s on 1024 size blocks: 761 camellia-192-cbc's in 2.92s
Doing camellia-192-cbc for 3s on 8192 size blocks: 97 camellia-192-cbc's in 2.95s
Doing camellia-192-cbc for 3s on 16384 size blocks: 49 camellia-192-cbc's in 2.99s
Doing camellia-256-cbc for 3s on 16 size blocks: 38345 camellia-256-cbc's in 2.90s
Doing camellia-256-cbc for 3s on 64 size blocks: 11235 camellia-256-cbc's in 2.87s
Doing camellia-256-cbc for 3s on 256 size blocks: 2997 camellia-256-cbc's in 2.92s
Doing camellia-256-cbc for 3s on 1024 size blocks: 762 camellia-256-cbc's in 2.94s
Doing camellia-256-cbc for 3s on 8192 size blocks: 97 camellia-256-cbc's in 2.89s
Doing camellia-256-cbc for 3s on 16384 size blocks: 47 camellia-256-cbc's in 2.85s
Doing ghash for 3s on 16 size blocks: 35128 ghash's in 2.92s
Doing ghash for 3s on 64 size blocks: 21007 ghash's in 2.92s
Doing ghash for 3s on 256 size blocks: 8071 ghash's in 2.91s
Doing ghash for 3s on 1024 size blocks: 2277 ghash's in 2.91s
Doing ghash for 3s on 8192 size blocks: 302 ghash's in 2.94s
Doing ghash for 3s on 16384 size blocks: 152 ghash's in 2.89s
Doing rand for 3s on 16 size blocks: 2348 rand's in 2.60s
Doing rand for 3s on 64 size blocks: 2110 rand's in 2.62s
Doing rand for 3s on 256 size blocks: 1398 rand's in 2.73s
Doing rand for 3s on 1024 size blocks: 575 rand's in 2.72s
Doing rand for 3s on 8192 size blocks: 95 rand's in 2.87s
Doing rand for 3s on 16384 size blocks: 48 rand's in 2.94s
Doing 512 bits private rsa's for 10s: 42 512 bits private RSA's in 9.77s
Doing 512 bits public rsa's for 10s: 503 512 bits public RSA's in 9.73s
Doing 1024 bits private rsa's for 10s: 8 1024 bits private RSA's in 10.80s
Doing 1024 bits public rsa's for 10s: 147 1024 bits public RSA's in 9.68s
Doing 2048 bits private rsa's for 10s: 2 2048 bits private RSA's in 17.60s
Doing 2048 bits public rsa's for 10s: 30 2048 bits public RSA's in 7.30s
Doing 3072 bits private rsa's for 10s: 1 3072 bits private RSA's in 30.46s
Doing 3072 bits public rsa's for 10s: 17 3072 bits public RSA's in 10.25s
Doing 512 bits sign dsa's for 10s: 33 512 bits DSA signs in 9.91s
Doing 512 bits verify dsa's for 10s: 38 512 bits DSA verify in 9.70s
Doing 1024 bits sign dsa's for 10s: 11 1024 bits DSA signs in 9.97s
Doing 1024 bits verify dsa's for 10s: 12 1024 bits DSA verify in 10.33s
Doing 2048 bits sign dsa's for 10s: 4 2048 bits DSA signs in 12.50s
Doing 2048 bits verify dsa's for 10s: 4 2048 bits DSA verify in 11.99s
Doing 160 bits sign ecdsa's for 10s: 15 160 bits ECDSA signs in 9.81s
Doing 160 bits verify ecdsa's for 10s: 19 160 bits ECDSA verify in 9.78s
Doing 192 bits sign ecdsa's for 10s: 16 192 bits ECDSA signs in 10.20s
Doing 192 bits verify ecdsa's for 10s: 22 192 bits ECDSA verify in 9.74s
Doing 224 bits sign ecdsa's for 10s: 11 224 bits ECDSA signs in 9.79s
Doing 224 bits verify ecdsa's for 10s: 16 224 bits ECDSA verify in 9.98s
Doing 256 bits sign ecdsa's for 10s: 7 256 bits ECDSA signs in 10.14s
Doing 256 bits verify ecdsa's for 10s: 10 256 bits ECDSA verify in 10.05s
Doing 384 bits sign ecdsa's for 10s: 3 384 bits ECDSA signs in 9.69s
Doing 384 bits verify ecdsa's for 10s: 5 384 bits ECDSA verify in 11.01s
Doing 521 bits sign ecdsa's for 10s: 1 521 bits ECDSA signs in 11.62s
Doing 521 bits verify ecdsa's for 10s: 2 521 bits ECDSA verify in 14.13s
Doing 160 bits  ecdh's for 10s: 16 160-bits ECDH ops in 9.71s
Doing 192 bits  ecdh's for 10s: 18 192-bits ECDH ops in 10.22s
Doing 224 bits  ecdh's for 10s: 12 224-bits ECDH ops in 9.71s
Doing 256 bits  ecdh's for 10s: 8 256-bits ECDH ops in 10.68s
Illegal instruction (core dumped)
[/tmp] martin@somnambulist > ./rwverify 
1025 verifications in 10.013782 sec
102.358931 v/s
[/tmp] martin@somnambulist > ./Falcon-impl-20211101/speed 
time threshold = 2.0000 s
kg = keygen, ek = expand private key, sd = sign (without expanded key)
st = sign (with expanded key), vv = verify
sdc, stc, vvc: like sd, st and vv, but with constant-time hash-to-point
keygen in milliseconds, other values in microseconds

degree  kg(ms)   ek(us)   sd(us)  sdc(us)   st(us)  stc(us)   vv(us)  vvc(us)
 256:  3640.00 29315.07 120555.56 128125.00 73448.28 80000.00 11363.64 16296.30
 512: 11630.00 64848.48 260000.00 265000.00 156923.08 162307.69 25375.00 29452.05
1024: 28760.00 144000.00 545000.00 555000.00 314285.71 322857.14 50250.00 59722.22
[/tmp] martin@somnambulist > openssl speed ed25519

Doing 253 bits sign Ed25519's for 10s: 168 253 bits Ed25519 signs in 9.74s 
Doing 253 bits verify Ed25519's for 10s: 47 253 bits Ed25519 verify in 9.77s
version: 3.0.9
NetBSD 10.99.5
options: bn(32,32)
gcc version 10.4.0 (NetBSD nb1 20220722) 
CPUINFO: N/A 
                              sign    verify    sign/s verify/s
 253 bits EdDSA (Ed25519)   0.0580s   0.2079s     17.2      4.8