Improving OpenSSL Performance

Presented at ToorCon San Diego 17 (2015), Oct. 24, 2015, 1 p.m. (50 minutes).

OpenSSL 1.0.2 introduced significant cryptographic enhancements to the AES, SHA and public key algorithms in order to greatly improve TLS session performance. This talk examines the most novel innovations: function stitching and multibuffer, which allow a single hardware thread to perform multiple operations in parallel in order to improve bulk encryption and authentication performance. We’ll look at the overall design of these techniques, how they were implemented in OpenSSL as well as how they perform in system-level tests.

Presenters:

• John Mechalas
  John has worked for Intel since 1994, spending most of those years as a UNIX systems administrator and systems programmer supporting a large design engineering environment. He is now an application engineer working primarily with security technologies. John lives near Portland, Oregon, with his wife, dogs, and cats. In his free time, he does photography and performs improvisational comedy.

Similar Presentations:

• DEF CON 16 (2008) / Predictable RNG in the Vulnerable Debian OpenSSL Package, the What and the How
• Still Hacking Anyway (SHA2017) / Attacking OpenSSL using Side-channel Attacks: The RSA case study