OpenSSL benchmarks

These benchmarks provide a rough estimate of OpenSSL performance variation on various hardware and software configurations.

Be sure to include the blank return (new) line.

1. Install openssl-util (check package and dependencies' sizes with opkg info {pkg})

   opkg update
   opkg install openssl-util
    

2. If flash space is limited, install openssl-utils into ram so it is gone after reboot.

   opkg update
   opkg install openssl-util -d ram
   export PATH="${PATH}:/tmp/usr/bin"
   export LD_LIBRARY_PATH="${LD_LIBRARY_PATH}:/tmp/usr/lib"
    

3. If your router has a multi core/thread SOC, please run the single-core and the multi-core tests and share both results.
   • Before running the tests you may want to disable CPU-consuming services like Transmission and restart your router (so the service will stop and not start after the reboot).
   • For single-core/thread performance, simply drop the following script into the shell.

     W='\033[0;37m' ; G='\033[0;32m' 
     openssl speed md5 sha1 sha256 sha512 des des-ede3 aes-128-cbc aes-192-cbc aes-256-cbc rsa2048 dsa2048 | tee /tmp/sslspeed
     . /etc/os-release; echo -e "\n\n${G}"\
     $(awk -v "rev=${BUILD_ID%%-*}" -v "FS=: " -v "ORS=" -e 'BEGIN \
         {print "| " rev " single-thread "} !a[$0]++ && /(Processor|Hardware|machine|cpu model|system type|BogoMIPS)/ \
     	{print "| " $2 " "}' /proc/cpuinfo) \
     $(awk -v "ORS=" -e '$1 ~ /OpenSSL/ {print "| " $2 " |"} $1 ~ /version/ {print "| " $2 " |"} $1 ~ /(md5|sha)/ \
         {print "  " $5 " | "} $1 ~ /(des|aes)/ {b = b "  " $6 " |"} $1 ~ /(rsa|dsa)/ \
         {print b " " $6 " | " $7 " | ";b=""}' /tmp/sslspeed \
     | sed -e 's/\.\(..\)k/\10/g') ;  echo -e "\n${W}"
      

   • For multi-core performance, there is an additional parameter called CPUCoreCount. The script sets this variable automatically, so you can drag and drop this one too. But in some cases, you may want/need to define it manually. To set it manually, remove the # from #CPUCoreCount=2 and set the correct natural number value.

     CPUCoreCount=$(grep -c ^processor /proc/cpuinfo); W='\033[0;37m' ; G='\033[0;32m' ; 
     #CPUCoreCount=2
     openssl speed -multi $CPUCoreCount md5 sha1 sha256 sha512 des des-ede3 aes-128-cbc aes-192-cbc aes-256-cbc rsa2048 dsa2048 | tee /tmp/sslspeedm
     . /etc/os-release; echo -e "\n\n${G}"\
     $(awk -v "rev=${BUILD_ID%%-*}" -v "FS=: " -v "ORS=" -v "CC=$CPUCoreCount" -e 'BEGIN \
         {print "| " rev " -multi " CC " "} !a[$0]++ && /(Processor|Hardware|machine|cpu model|system type|BogoMIPS)/ \
     	{print "| " $2 " "}' /proc/cpuinfo) \
     $(awk -v "ORS=" -e '$1 ~ /OpenSSL/ {print "| " $2 " |"} $1 ~ /version/ {print "| " $2 " |"} $1 ~ /(md5|sha)/ \
         {print "  " $5 " | "} $1 ~ /(des|aes)/ {b = b "  " $6 " |"} $1 ~ /(rsa|dsa)/ \
         {print b " " $6 " | " $7 " | ";b=""}' /tmp/sslspeedm \
     | sed -e 's/\.\(..\)k/\10/g') ;  echo -e "\n${W}"
      

4. When the script is compete, copy the green text output (final result) with the “|”-delimiters into the benchmark table. Be sure to Preview and validate the table integrity.
5. You can free up the space used by openssl-util by removing the package and dependencies (if not needed by other packages) with:

   opkg remove openssl-util libopenssl zlib

1. In OpenWRT 23.05, the /tmp install is not working.
2. In OpenWRT 23.05, des (des-cbc) is missing and will report 0. OpenWRT 23.05 uses OpenSSL 3 and I experienced lower scores compared to OpenSSL 1 scores.
3. Elliptic curves performance in OpenSSH.

The benchmark results are in bytes per second processed.