[Pkg-openssl-devel] Bug#867715: openssl: "unknown group" error messages from 'openssl speed' ECDSA and ECDH
Matthew Woodcraft
matthew at woodcraft.me.uk
Sat Jul 8 21:09:18 UTC 2017
Package: openssl
Version: 1.1.0f-3
Severity: normal
Running 'openssl speed', I see error messages from ECDSA and ECDH:
ECDSA failure.
4146407744:error:100AE081:elliptic curve routines:EC_GROUP_new_by_curve_name:unknown group:../crypto/ec/ec_curve.c:3100:
amd
ECDH failure.
4146645312:error:100AE081:elliptic curve routines:EC_GROUP_new_by_curve_name:unknown group:../crypto/ec/ec_curve.c:3100:
4146645312:error:100AE081:elliptic curve routines:EC_GROUP_new_by_curve_name:unknown group:../crypto/ec/ec_curve.c:3100:
The errors seem to be reliably reproducible, with the same error messages
except that in each case the first number changes.
Full output follows:
% openssl speed ecdsa
Doing 160 bit sign ecdsa's for 10s: 94968 160 bit ECDSA signs in 9.98s
Doing 160 bit verify ecdsa's for 10s: 33582 160 bit ECDSA verify in 10.00s
Doing 192 bit sign ecdsa's for 10s: 94465 192 bit ECDSA signs in 10.00s
Doing 192 bit verify ecdsa's for 10s: 25142 192 bit ECDSA verify in 9.98s
Doing 224 bit sign ecdsa's for 10s: 72176 224 bit ECDSA signs in 10.00s
Doing 224 bit verify ecdsa's for 10s: 18713 224 bit ECDSA verify in 10.00s
Doing 256 bit sign ecdsa's for 10s: 115773 256 bit ECDSA signs in 9.98s
Doing 256 bit verify ecdsa's for 10s: 50658 256 bit ECDSA verify in 10.00s
Doing 384 bit sign ecdsa's for 10s: 24252 384 bit ECDSA signs in 9.98s
Doing 384 bit verify ecdsa's for 10s: 6327 384 bit ECDSA verify in 10.00s
Doing 521 bit sign ecdsa's for 10s: 11092 521 bit ECDSA signs in 10.00s
Doing 521 bit verify ecdsa's for 10s: 2917 521 bit ECDSA verify in 10.00s
Doing 163 bit sign ecdsa's for 10s: 39258 163 bit ECDSA signs in 10.00s
Doing 163 bit verify ecdsa's for 10s: 16076 163 bit ECDSA verify in 10.00s
Doing 233 bit sign ecdsa's for 10s: 20407 233 bit ECDSA signs in 10.00s
Doing 233 bit verify ecdsa's for 10s: 9629 233 bit ECDSA verify in 10.00s
Doing 283 bit sign ecdsa's for 10s: 13373 283 bit ECDSA signs in 10.00s
Doing 283 bit verify ecdsa's for 10s: 5377 283 bit ECDSA verify in 10.00s
Doing 409 bit sign ecdsa's for 10s: 5472 409 bit ECDSA signs in 10.00s
Doing 409 bit verify ecdsa's for 10s: 2708 409 bit ECDSA verify in 10.00s
Doing 571 bit sign ecdsa's for 10s: 2251 571 bit ECDSA signs in 10.00s
Doing 571 bit verify ecdsa's for 10s: 1144 571 bit ECDSA verify in 10.00s
Doing 163 bit sign ecdsa's for 10s: 39505 163 bit ECDSA signs in 9.98s
Doing 163 bit verify ecdsa's for 10s: 15082 163 bit ECDSA verify in 10.00s
Doing 233 bit sign ecdsa's for 10s: 20490 233 bit ECDSA signs in 10.00s
Doing 233 bit verify ecdsa's for 10s: 8940 233 bit ECDSA verify in 10.00s
Doing 283 bit sign ecdsa's for 10s: 13441 283 bit ECDSA signs in 9.98s
Doing 283 bit verify ecdsa's for 10s: 4926 283 bit ECDSA verify in 9.98s
Doing 409 bit sign ecdsa's for 10s: 5451 409 bit ECDSA signs in 10.00s
Doing 409 bit verify ecdsa's for 10s: 2447 409 bit ECDSA verify in 10.00s
Doing 571 bit sign ecdsa's for 10s: 2282 571 bit ECDSA signs in 10.00s
Doing 571 bit verify ecdsa's for 10s: 1020 571 bit ECDSA verify in 10.00s
ECDSA failure.
4146407744:error:100AE081:elliptic curve routines:EC_GROUP_new_by_curve_name:unknown group:../crypto/ec/ec_curve.c:3100:
OpenSSL 1.1.0f 25 May 2017
built on: reproducible build, date unspecified
options:bn(64,32) rc4(8x,mmx) des(long) aes(partial) blowfish(ptr)
compiler: gcc -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_THREADS -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_BN_ASM_PART_WORDS -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DRMD160_ASM -DAES_ASM -DVPAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSLDIR="\"/usr/lib/ssl\"" -DENGINESDIR="\"/usr/lib/i386-linux-gnu/engines-1.1\""
sign verify sign/s verify/s
160 bit ecdsa (secp160r1) 0.0001s 0.0003s 9515.8 3358.2
192 bit ecdsa (nistp192) 0.0001s 0.0004s 9446.5 2519.2
224 bit ecdsa (nistp224) 0.0001s 0.0005s 7217.6 1871.3
256 bit ecdsa (nistp256) 0.0001s 0.0002s 11600.5 5065.8
384 bit ecdsa (nistp384) 0.0004s 0.0016s 2430.1 632.7
521 bit ecdsa (nistp521) 0.0009s 0.0034s 1109.2 291.7
163 bit ecdsa (nistk163) 0.0003s 0.0006s 3925.8 1607.6
233 bit ecdsa (nistk233) 0.0005s 0.0010s 2040.7 962.9
283 bit ecdsa (nistk283) 0.0007s 0.0019s 1337.3 537.7
409 bit ecdsa (nistk409) 0.0018s 0.0037s 547.2 270.8
571 bit ecdsa (nistk571) 0.0044s 0.0087s 225.1 114.4
163 bit ecdsa (nistb163) 0.0003s 0.0007s 3958.4 1508.2
233 bit ecdsa (nistb233) 0.0005s 0.0011s 2049.0 894.0
283 bit ecdsa (nistb283) 0.0007s 0.0020s 1346.8 493.6
409 bit ecdsa (nistb409) 0.0018s 0.0041s 545.1 244.7
571 bit ecdsa (nistb571) 0.0044s 0.0098s 228.2 102.0
253 bit ecdsa (X25519) 0.0000s 0.0000s inf inf
% openssl speed ecdh
Doing 160 bit ecdh's for 10s: 40040 160-bit ECDH ops in 9.98s
Doing 192 bit ecdh's for 10s: 29780 192-bit ECDH ops in 10.00s
Doing 224 bit ecdh's for 10s: 23319 224-bit ECDH ops in 10.00s
Doing 256 bit ecdh's for 10s: 66411 256-bit ECDH ops in 10.00s
Doing 384 bit ecdh's for 10s: 7515 384-bit ECDH ops in 10.00s
Doing 521 bit ecdh's for 10s: 3474 521-bit ECDH ops in 10.00s
Doing 163 bit ecdh's for 10s: 33157 163-bit ECDH ops in 10.00s
Doing 233 bit ecdh's for 10s: 19969 233-bit ECDH ops in 10.00s
Doing 283 bit ecdh's for 10s: 10910 283-bit ECDH ops in 10.00s
Doing 409 bit ecdh's for 10s: 5508 409-bit ECDH ops in 10.00s
Doing 571 bit ecdh's for 10s: 2263 571-bit ECDH ops in 10.00s
Doing 163 bit ecdh's for 10s: 30563 163-bit ECDH ops in 10.00s
Doing 233 bit ecdh's for 10s: 18374 233-bit ECDH ops in 10.00s
Doing 283 bit ecdh's for 10s: 9918 283-bit ECDH ops in 10.00s
Doing 409 bit ecdh's for 10s: 4896 409-bit ECDH ops in 10.00s
Doing 571 bit ecdh's for 10s: 2038 571-bit ECDH ops in 10.00s
ECDH failure.
4146645312:error:100AE081:elliptic curve routines:EC_GROUP_new_by_curve_name:unknown group:../crypto/ec/ec_curve.c:3100:
4146645312:error:100AE081:elliptic curve routines:EC_GROUP_new_by_curve_name:unknown group:../crypto/ec/ec_curve.c:3100:
OpenSSL 1.1.0f 25 May 2017
built on: reproducible build, date unspecified
options:bn(64,32) rc4(8x,mmx) des(long) aes(partial) blowfish(ptr)
compiler: gcc -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_THREADS -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_BN_ASM_PART_WORDS -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DRMD160_ASM -DAES_ASM -DVPAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSLDIR="\"/usr/lib/ssl\"" -DENGINESDIR="\"/usr/lib/i386-linux-gnu/engines-1.1\""
op op/s
160 bit ecdh (secp160r1) 0.0002s 4012.0
192 bit ecdh (nistp192) 0.0003s 2978.0
224 bit ecdh (nistp224) 0.0004s 2331.9
256 bit ecdh (nistp256) 0.0002s 6641.1
384 bit ecdh (nistp384) 0.0013s 751.5
521 bit ecdh (nistp521) 0.0029s 347.4
163 bit ecdh (nistk163) 0.0003s 3315.7
233 bit ecdh (nistk233) 0.0005s 1996.9
283 bit ecdh (nistk283) 0.0009s 1091.0
409 bit ecdh (nistk409) 0.0018s 550.8
571 bit ecdh (nistk571) 0.0044s 226.3
163 bit ecdh (nistb163) 0.0003s 3056.3
233 bit ecdh (nistb233) 0.0005s 1837.4
283 bit ecdh (nistb283) 0.0010s 991.8
409 bit ecdh (nistb409) 0.0020s 489.6
571 bit ecdh (nistb571) 0.0049s 203.8
-- System Information:
Debian Release: 9.0
APT prefers stable
APT policy: (500, 'stable'), (200, 'experimental')
Architecture: i386 (x86_64)
Foreign Architectures: amd64
Kernel: Linux 4.9.0-3-amd64 (SMP w/4 CPU cores)
Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE=C (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages openssl depends on:
ii libc6 2.24-11+deb9u1
ii libssl1.1 1.1.0f-3
openssl recommends no packages.
Versions of packages openssl suggests:
ii ca-certificates 20161130+nmu1
-- no debconf information
More information about the Pkg-openssl-devel
mailing list