kris/android
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
bcd12b6b42
android/mbedtls_vs_boringssl/APPENDIX.md

279 lines
14 KiB
Markdown
Raw Blame History

# Additional information
A lot of, mostly useless, details
## Appendix A
Default NDK flags
* CC:
```
--target=aarch64-none-linux-android
-DBORINGSSL_IMPLEMENTATION
-g
-DANDROID
-ffunction-sections
-funwind-tables
-fstack-protector-strong
-no-canonical-prefixes
-Wa,--noexecstack
-Wformat
-Werror=format-security
-Werror
-Wformat=2
-Wsign-compare
-Wmissing-field-initializers
-Wwrite-strings
-Wall
-ggdb
-fvisibility=hidden
-fno-common
-Wnewline-eof
-fcolor-diagnostics
-Wimplicit-fallthrough
-Wmissing-prototypes
-Wold-style-definition
-Wstrict-prototypes
-Wshadow
-D_XOPEN_SOURCE=700
-O2
-DNDEBUG
-fPIC
```
* CPP:
```
-cc1
-triple aarch64-none-linux-android
-emit-obj
-mnoexecstack
-disable-free
-disable-llvm-verifier
-discard-value-names
-mrelocation-model pic
-pic-level 2
-pic-is-pie
-mthread-model posix
-mdisable-fp-elim
-fmath-errno
-masm-verbose
-mconstructor-aliases
-munwind-tables
-fuse-init-array
-target-cpu generic
-target-feature +neon
-target-abi aapcs
-dwarf-column-info
-debug-info-kind=limited
-dwarf-version=4
-debugger-tuning=gdb
-ffunction-sections
-D BORINGSSL_IMPLEMENTATION
-D ANDROID
-D NDEBUG
-O2
-Wformat
-Werror=format-security
-Werror
-Wformat=2
-Wsign-compare
-Wmissing-field-initializers
-Wwrite-strings
-Wall
-Wnewline-eof
-Wimplicit-fallthrough
-Wmissing-declarations
-Wmissing-prototypes
-Wshadow
-std=c++11
-fdeprecated-macro
-fdebug-compilation-dir /home/hdc/repos/mbedtls_vs_boringssl/bssl/src/build/crypto
-ferror-limit 19
-fmessage-length 238
-fvisibility hidden
-femulated-tls
-stack-protector 2
-fallow-half-arguments-and-returns
-fno-rtti
-fno-signed-char
-fobjc-runtime=gcc
-fno-common
-fdiagnostics-show-option
-fcolor-diagnostics
-vectorize-loops
-vectorize-slp
```
## Appendix B
Test platform settings
```
[ro.build.id]: [OPR6.170623.013]
[ro.bootimage.build.date]: [Wed Oct 11 15:46:15 BST 2017]
[ro.bootimage.build.fingerprint]: [Android/hikey/hikey:8.0.0/OPR6.170623.013/110:userdebug/test-keys]
[ro.product.cpu.abi]: [arm64-v8a]
[ro.product.cpu.abilist]: [arm64-v8a,armeabi-v7a,armeabi]
[ro.product.cpu.abilist32]: [armeabi-v7a,armeabi]
[ro.product.cpu.abilist64]: [arm64-v8a]
[ro.build.version.sdk]: [26]
[ro.build.version.security_patch]: [2017-08-05]
```
## Appendix C
Performance measures provied by ``bssl speed``:
| Operation | Small | Default |
|-----------|------|---------|
|RSA 2048 signing | (59.5 ops/sec) | (108.1 ops/sec) |
|RSA 2048 verify | (2377.5 ops/sec) | (4078.3 ops/sec) |
|RSA 4096 signing | (8.3 ops/sec) | (14.9 ops/sec) |
|RSA 4096 verify | (668.0 ops/sec) | (1088.4 ops/sec) |
|AES-128-GCM (16 bytes) | (497832.2 ops/sec): 8.0 MB/s | (1690241.1 ops/sec): 27.0 MB/s |
|AES-128-GCM (1350 bytes) | (17675.4 ops/sec): 23.9 MB/s | (291430.3 ops/sec): 393.4 MB/s |
|AES-128-GCM (8192 bytes) | (2991.6 ops/sec): 24.5 MB/s | (57088.8 ops/sec): 467.7 MB/s |
|AES-256-GCM (16 bytes) | (444847.4 ops/sec): 7.1 MB/s | (1615148.8 ops/sec): 25.8 MB/s |
|AES-256-GCM (1350 bytes) | (14792.6 ops/sec): 20.0 MB/s | (254718.5 ops/sec): 343.9 MB/s |
|AES-256-GCM (8192 bytes) | (2525.7 ops/sec): 20.7 MB/s | (49056.6 ops/sec): 401.9 MB/s |
|ChaCha20-Poly1305 (16 bytes) | (385043.6 ops/sec): 6.2 MB/s | (460788.5 ops/sec): 7.4 MB/s |
|ChaCha20-Poly1305 (1350 bytes) | (33108.8 ops/sec): 44.7 MB/s | (67622.8 ops/sec): 91.3 MB/s |
|ChaCha20-Poly1305 (8192 bytes) | (5905.1 ops/sec): 48.4 MB/s | (13219.5 ops/sec): 108.3 MB/s |
|DES-EDE3-CBC-SHA1 (16 bytes) | (100311.5 ops/sec): 1.6 MB/s | (110073.3 ops/sec): 1.8 MB/s |
|DES-EDE3-CBC-SHA1 (1350 bytes) | (3787.2 ops/sec): 5.1 MB/s | (3926.7 ops/sec): 5.3 MB/s |
|DES-EDE3-CBC-SHA1 (8192 bytes) | (638.4 ops/sec): 5.2 MB/s | (661.2 ops/sec): 5.4 MB/s |
|AES-128-CBC-SHA1 (16 bytes) | (268159.9 ops/sec): 4.3 MB/s | (540844.8 ops/sec): 8.7 MB/s |
|AES-128-CBC-SHA1 (1350 bytes) | (22535.6 ops/sec): 30.4 MB/s | (162597.6 ops/sec): 219.5 MB/s |
|AES-128-CBC-SHA1 (8192 bytes) | (3959.9 ops/sec): 32.4 MB/s | (37787.3 ops/sec): 309.6 MB/s |
|AES-256-CBC-SHA1 (16 bytes) | (244904.2 ops/sec): 3.9 MB/s | (524976.9 ops/sec): 8.4 MB/s |
|AES-256-CBC-SHA1 (1350 bytes) | (18272.3 ops/sec): 24.7 MB/s | (141626.7 ops/sec): 191.2 MB/s |
|AES-256-CBC-SHA1 (8192 bytes) | (3181.3 ops/sec): 26.1 MB/s | (31195.9 ops/sec): 255.6 MB/s |
|AES-128-GCM-SIV (16 bytes) | (244929.5 ops/sec): 3.9 MB/s | (776750.7 ops/sec): 12.4 MB/s |
|AES-128-GCM-SIV (1350 bytes) | (14640.5 ops/sec): 19.8 MB/s | (66627.7 ops/sec): 89.9 MB/s |
|AES-128-GCM-SIV (8192 bytes) | (2531.6 ops/sec): 20.7 MB/s | (11850.0 ops/sec): 97.1 MB/s |
|AES-256-GCM-SIV (16 bytes) | (171899.3 ops/sec): 2.8 MB/s | (660748.9 ops/sec): 10.6 MB/s |
|AES-256-GCM-SIV (1350 bytes) | (12489.6 ops/sec): 16.9 MB/s | (61124.5 ops/sec): 82.5 MB/s |
|AES-256-GCM-SIV (8192 bytes) | (2182.7 ops/sec): 17.9 MB/s | (10936.1 ops/sec): 89.6 MB/s |
|AES-128-GCM-SIV (16 bytes) | (239698.0 ops/sec): 3.8 MB/s | (733661.0 ops/sec): 11.7 MB/s |
|AES-128-GCM-SIV (1350 bytes) | (14616.0 ops/sec): 19.7 MB/s | (65984.0 ops/sec): 89.1 MB/s |
|AES-128-GCM-SIV (8192 bytes) | (2529.8 ops/sec): 20.7 MB/s | (11745.7 ops/sec): 96.2 MB/s |
|AES-256-GCM-SIV (16 bytes) | (170826.1 ops/sec): 2.7 MB/s | (626465.6 ops/sec): 10.0 MB/s |
|AES-256-GCM-SIV (1350 bytes) | (12474.8 ops/sec): 16.8 MB/s | (60595.5 ops/sec): 81.8 MB/s |
|AES-256-GCM-SIV (8192 bytes) | (2182.1 ops/sec): 17.9 MB/s | (10841.9 ops/sec): 88.8 MB/s |
|AES-128-CCM-Bluetooth (16 bytes) | (438558.8 ops/sec): 7.0 MB/s | (1405567.1 ops/sec): 22.5 MB/s |
|AES-128-CCM-Bluetooth (1350 bytes) | (14776.5 ops/sec): 19.9 MB/s | (140168.4 ops/sec): 189.2 MB/s |
|AES-128-CCM-Bluetooth (8192 bytes) | (2498.7 ops/sec): 20.5 MB/s | (25890.2 ops/sec): 212.1 MB/s |
|SHA-1 (16 bytes) | (1244563.2 ops/sec): 19.9 MB/s | (2567122.0 ops/sec): 41.1 MB/s |
|SHA-1 (256 bytes) | (341934.0 ops/sec): 87.5 MB/s | (1162590.8 ops/sec): 297.6 MB/s |
|SHA-1 (8192 bytes) | (14574.3 ops/sec): 119.4 MB/s | (66844.3 ops/sec): 547.6 MB/s |
|SHA-256 (16 bytes) | (691326.6 ops/sec): 11.1 MB/s | (2431927.0 ops/sec): 38.9 MB/s |
|SHA-256 (256 bytes) | (166138.9 ops/sec): 42.5 MB/s | (1120621.2 ops/sec): 286.9 MB/s |
|SHA-256 (8192 bytes) | (6824.7 ops/sec): 55.9 MB/s | (63214.7 ops/sec): 517.9 MB/s |
|SHA-512 (16 bytes) | (688007.9 ops/sec): 11.0 MB/s | (729988.3 ops/sec): 11.7 MB/s |
|SHA-512 (256 bytes) | (272146.5 ops/sec): 69.7 MB/s | (289178.7 ops/sec): 74.0 MB/s |
|SHA-512 (8192 bytes) | (14014.7 ops/sec): 114.8 MB/s | (14759.6 ops/sec): 120.9 MB/s |
|RNG (16 bytes) | (137217.4 ops/sec): 2.2 MB/s | (249239.3 ops/sec): 4.0 MB/s |
|RNG (256 bytes) | (69898.9 ops/sec): 17.9 MB/s | (224698.5 ops/sec): 57.5 MB/s |
|RNG (8192 bytes) | (4058.7 ops/sec): 33.2 MB/s | (55705.4 ops/sec): 456.3 MB/s |
|ECDH P-224 operations | (151.0 ops/sec) | (1602.4 ops/sec) |
|ECDH P-256 operations | (594.7 ops/sec) | (642.8 ops/sec) |
|ECDH P-384 operations | (59.0 ops/sec) | (97.4 ops/sec) |
|ECDH P-521 operations | (27.1 ops/sec) | (43.4 ops/sec) |
|ECDSA P-224 signing | (277.8 ops/sec) | (3312.7 ops/sec) |
|ECDSA P-224 verify | (241.2 ops/sec) | (1451.7 ops/sec) |
|ECDSA P-256 signing | (1396.6 ops/sec) | (1738.5 ops/sec) |
|ECDSA P-256 verify | (672.1 ops/sec) | (704.2 ops/sec) |
|ECDSA P-384 signing | (107.0 ops/sec) | (177.6 ops/sec) |
|ECDSA P-384 verify | (94.4 ops/sec) | (156.9 ops/sec) |
|ECDSA P-521 signing | (49.0 ops/sec) | (78.2 ops/sec) |
|ECDSA P-521 verify | (43.8 ops/sec) | (70.8 ops/sec) |
Performance measures provided by ``benchmark``:
| Algo | Small | Normal |
|-------------------------------|----------------------|----------------------|
|MD5 | 131223 KiB/s | 131761 KiB/s |
|RIPEMD160 | 81451 KiB/s | 89899 KiB/s |
|SHA-1 | 104117 KiB/s | 104375 KiB/s |
|SHA-256 | 46809 KiB/s | 52044 KiB/s |
|SHA-512 | 56760 KiB/s | 57648 KiB/s |
|ARC4 | 65014 KiB/s | 65023 KiB/s |
|3DES | 7785 KiB/s | 7885 KiB/s |
|DES | 19071 KiB/s | 19512 KiB/s |
|AES-CBC-128 | 32460 KiB/s | 35995 KiB/s |
|AES-CBC-192 | 28392 KiB/s | 31044 KiB/s |
|AES-CBC-256 | 25213 KiB/s | 27296 KiB/s |
|AES-GCM-128 | 16399 KiB/s | 16398 KiB/s |
|AES-GCM-192 | 15272 KiB/s | 15271 KiB/s |
|AES-GCM-256 | 14287 KiB/s | 14286 KiB/s |
|AES-CCM-128 | 15824 KiB/s | 15887 KiB/s |
|AES-CCM-192 | 13853 KiB/s | 13899 KiB/s |
|AES-CCM-256 | 12315 KiB/s | 12356 KiB/s |
|CAMELLIA-CBC-128 | 19735 KiB/s | 26762 KiB/s |
|CAMELLIA-CBC-192 | 15458 KiB/s | 20839 KiB/s |
|CAMELLIA-CBC-256 | 15459 KiB/s | 20839 KiB/s |
|BLOWFISH-CBC-128 | 25188 KiB/s | 28955 KiB/s |
|BLOWFISH-CBC-192 | 25189 KiB/s | 28954 KiB/s |
|BLOWFISH-CBC-256 | 25183 KiB/s | 28955 KiB/s |
|CTR_DRBG (NOPR) | 27122 KiB/s | 27050 KiB/s |
|CTR_DRBG (PR) | 18397 KiB/s | 19111 KiB/s |
|HMAC_DRBG SHA-1 (NOPR) | 6746 KiB/s | 6968 KiB/s |
|HMAC_DRBG SHA-1 (PR) | 6208 KiB/s | 6426 KiB/s |
|HMAC_DRBG SHA-256 (NOPR) | 5321 KiB/s | 5795 KiB/s |
|HMAC_DRBG SHA-256 (PR) | 4657 KiB/s | 5083 KiB/s |
|RSA-2048 | 652 public/s | 653 public/s |
|RSA-2048 | 17 private/s | 17 private/s |
|RSA-4096 | 168 public/s | 168 public/s |
|RSA-4096 | 3 private/s | 3 private/s |
|DHE-2048 | 3 handshake/s | 3 handshake/s |
|DH-2048 | 5 handshake/s | 6 handshake/s |
|DHE-3072 | 1 handshake/s | 1 handshake/s |
|DH-3072 | 2 handshake/s | 2 handshake/s |
|ECDSA-secp521r1 | 70 sign/s | 74 sign/s |
|ECDSA-brainpoolP512r1 | 8 sign/s | 9 sign/s |
|ECDSA-secp384r1 | 126 sign/s | 133 sign/s |
|ECDSA-brainpoolP384r1 | 16 sign/s | 18 sign/s |
|ECDSA-secp256r1 | 189 sign/s | 195 sign/s |
|ECDSA-secp256k1 | 176 sign/s | 189 sign/s |
|ECDSA-brainpoolP256r1 | 27 sign/s | 31 sign/s |
|ECDSA-secp224r1 | 277 sign/s | 291 sign/s |
|ECDSA-secp224k1 | 216 sign/s | 230 sign/s |
|ECDSA-secp192r1 | 329 sign/s | 352 sign/s |
|ECDSA-secp192k1 | 264 sign/s | 277 sign/s |
|ECDSA-secp521r1 | 19 verify/s | 21 verify/s |
|ECDSA-brainpoolP512r1 | 2 verify/s | 2 verify/s |
|ECDSA-secp384r1 | 35 verify/s | 36 verify/s |
|ECDSA-brainpoolP384r1 | 4 verify/s | 4 verify/s |
|ECDSA-secp256r1 | 54 verify/s | 57 verify/s |
|ECDSA-secp256k1 | 53 verify/s | 57 verify/s |
|ECDSA-brainpoolP256r1 | 7 verify/s | 8 verify/s |
|ECDSA-secp224r1 | 82 verify/s | 86 verify/s |
|ECDSA-secp224k1 | 63 verify/s | 67 verify/s |
|ECDSA-secp192r1 | 102 verify/s | 110 verify/s |
|ECDSA-secp192k1 | 77 verify/s | 82 verify/s |
|ECDHE-secp521r1 | 20 handshake/s | 21 handshake/s |
|ECDHE-brainpoolP512r1 | 2 handshake/s | 2 handshake/s |
|ECDHE-secp384r1 | 37 handshake/s | 39 handshake/s |
|ECDHE-brainpoolP384r1 | 4 handshake/s | 4 handshake/s |
|ECDHE-secp256r1 | 57 handshake/s | 60 handshake/s |
|ECDHE-secp256k1 | 56 handshake/s | 60 handshake/s |
|ECDHE-brainpoolP256r1 | 7 handshake/s | 8 handshake/s |
|ECDHE-secp224r1 | 89 handshake/s | 92 handshake/s |
|ECDHE-secp224k1 | 67 handshake/s | 71 handshake/s |
|ECDHE-secp192r1 | 111 handshake/s | 118 handshake/s |
|ECDHE-secp192k1 | 83 handshake/s | 87 handshake/s |
|ECDHE-Curve25519 | 41 handshake/s | 41 handshake/s |
|ECDH-secp521r1 | 27 handshake/s | 28 handshake/s |
|ECDH-brainpoolP512r1 | 3 handshake/s | 3 handshake/s |
|ECDH-secp384r1 | 49 handshake/s | 51 handshake/s |
|ECDH-brainpoolP384r1 | 5 handshake/s | 5 handshake/s |
|ECDH-secp256r1 | 77 handshake/s | 81 handshake/s |
|ECDH-secp256k1 | 78 handshake/s | 82 handshake/s |
|ECDH-brainpoolP256r1 | 9 handshake/s | 11 handshake/s |
|ECDH-secp224r1 | 121 handshake/s | 126 handshake/s |
|ECDH-secp224k1 | 91 handshake/s | 97 handshake/s |
|ECDH-secp192r1 | 150 handshake/s | 159 handshake/s |
|ECDH-secp192k1 | 113 handshake/s | 120 handshake/s |
|ECDH-Curve25519 | 80 handshake/s | 82 handshake/s |
Reference in New Issue View Git Blame Copy Permalink