Details
Description
The most visible effect is the server startup on Windows in 11.4, which is now 10 times slower than it used to be, with 93% or the time spent in _CheckProbablePrime, coming from wolfssl_EVP_PKEY_keygen , that is used to generate private key, that is used to generate self-signed server SSL certificate (MDEV-31856)
Also, establishing an SSL connection is relatively slow, because of the same reason, WolfSSL large number math, and prime calculations.
There are different build options to speed up math, including assembly optimizations.
Interesting ones are
- WOLFSSL_SP_MATH_ALL ("new" math library, they promote now as being faster, instead of previously hyped fastmath)
- WOLFSSL_HAVE_SP_RSA (math optimizations for common RSA key sizes, 1024/2048/4096)
- WOLFSSL_SP_X86_64, WOLFSSL_SP_X86_64_ASM - optimizations for Intel architecture, including assembly
Attachments
Issue Links
- relates to
-
MDEV-31856 use ephemeral ssl certificates
-
- Closed
-
This is VTune profile of the started, of the applied fix with WOLFSSL_SP_MATH_ALL / WOLFSSL_HAVE_SP_RSA / WOLFSSL_SP_X86_64_ASM . It is now approx 10x faster, and one can even see avx2 optimizations.