openssl speed

test library performance 

openssl command


SYNOPSIS

openssl speed [-help] [-config filename] [-elapsed] [-evp algo] [-hmac algo] [-cmac algo] [-mb] [-aead] [-kem-algorithms] [-signature-algorithms] [-multi num] [-async_jobs num] [-misalign num] [-decrypt] [-primes num] [-seconds num] [-bytes num] [-mr] [-mlock] [-rand file(s)] [-writerand file] [-engine id] [-provider name] [-provider-path path] [-propquery propq] [algorithm...]


DESCRIPTION

This command is used to test the performance of cryptographic algorithms.

Options

-help 

Print out a usage message.

-config filename 

Specifies the configuration file to use. Optional; for a description of the default value, see COMMAND SUMMARY in openssl.

-elapsed 

When calculating operations- or bytes-per-second, use wall-clock time instead of CPU user time as divisor. It can be useful when testing speed of hardware engines.

-evp algo 

Use the specified cipher or message digest algorithm via the EVP interface. If algo is an AEAD cipher, then you can pass -aead to benchmark a TLS-like sequence. And if algo is a multi-buffer capable cipher, e.g. aes-128-cbc-hmac-sha1, then -mb will time multi-buffer operation.

To see the algorithms supported with this option, use openssl list -digest-algorithms or openssl list -cipher algorithms.

-multi num 

Run multiple operations in parallel.

-async_jobs num 

Enable async mode and start specified number of jobs.

-misalign num 

Misalign the buffers by the specified number of bytes.

-hmac digest 

Time the HMAC algorithm using the specified message digest.

-cmac cipher 

Time the CMAC algorithm using the specified cipher e.g. openssl speed -cmac aes128.

-decrypt 

Time the decryption instead of encryption. Affects only the EVP testing.

-mb 

Enable multi-block mode on EVP-named cipher.

-aead 

Benchmark EVP-named AEAD cipher in TLS-like sequence.

-kem-algorithms 

Benchmark KEM algorithms: key generation, encapsulation, decapsulation.

-signature-algorithms 

Benchmark signature algorithms: key generation, encapsulation, decapsulation.

-primes num 

Generate a num-prime RSA key and use it to run the benchmarks. This option is only effective if RSA algorithm is specified to test.

-seconds num 

Run benchmarks for num seconds.

-bytes num 

Run benchmarks on num-byte buffers. Affects ciphers, digests and the CSPRNG. The limit on the size of the buffer is INT_MAX - 64, which for a 32-bit machine would be 2147483583 bytes.

-mr 

Produce the summary in a mechanical, machine-readable format.

-mlock 

Lock memory into RAM for more deterministic measurements.

-rand files 
-writerand file 

See Random State Options in openssl for details.

-engine id 

See Engine Options in openssl for details. This option is deprecated.

-provider name 
-provider-path path 
-propquery propq 

See Provider Options in openssl for details.

algorithm... 

If any algorithm is given, then those algorithms are tested, otherwise a pre-compiled grand selection is tested.

If any options are given, speed tests those algorithms, otherwise all of the above are tested.


COPYRIGHT

Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.

Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or here: OpenSSL.


AVAILABILITY

PTC MKS Toolkit for System Administrators
PTC MKS Toolkit for Developers
PTC MKS Toolkit for Interoperability
PTC MKS Toolkit for Professional Developers
PTC MKS Toolkit for Professional Developers 64-Bit Edition
PTC MKS Toolkit for Enterprise Developers
PTC MKS Toolkit for Enterprise Developers 64-Bit Edition


PTC MKS Toolkit 10.5 Documentation Build 40.