Re: HTTPS trust anchors in sysinst
Mouse <[email protected]> Thu, 31 Aug 2023 22:36:59 -0400 (EDT)
| Newsgroups | gmane.os.netbsd.devel.installation |
|---|---|
| Message-ID | <[email protected]> |
> Yay! New build of latest current was a bit more successful. Here > are the results from "openssl speed" on a VAXstation 4000/90. Mind > it, it's a bit on the fast side among VAXen... > Gnat:/home/bqt> openssl speed > Doing md5 for 3s on 16 size blocks: 7403 md5's in 2.99s [186 lines snipped] > Doing 512 bits ecdh's for 10s: 2 512-bits ECDH ops in 12.74s > Doing 253 bits ecdh's for 10s: 68 253-bits ECDH ops in 10.14s > ECDH computations don't match. > Doing 253 bits sign Ed25519's for 10s: 184 253 bits Ed25519 signs in 10.07s > Doing 253 bits verify Ed25519's for 10s: 58 253 bits Ed25519 verify in > 10.11s > Doing 456 bits sign Ed448's for 10s: 29 456 bits Ed448 signs in 10.13s > EdDSA verify failure. No EdDSA verify will be done. > Doing 256 bits sign CurveSM2's for 10s: 8 256 bits CurveSM2 signs in 8.82s I find those "don't match" and "verify failure" lines disturbing. If they mean what they appear to, that seems to me to imply that it might not work to verify this way on VAXen at all, since the verification can fail when it shouldn't. /~\ The ASCII Mouse \ / Ribbon Campaign X Against HTML [email protected] / \ Email! 7D C8 61 52 5D E7 2D 39 4E F1 31 3E E8 B3 27 4B