[Pkg-openssl-devel] Bug#867715: openssl: "unknown group" error messages from 'openssl speed' ECDSA and ECDH

Matthew Woodcraft matthew at woodcraft.me.uk
Sat Jul 8 21:09:18 UTC 2017


Package: openssl
Version: 1.1.0f-3
Severity: normal

Running 'openssl speed', I see error messages from ECDSA and ECDH:

ECDSA failure.
4146407744:error:100AE081:elliptic curve routines:EC_GROUP_new_by_curve_name:unknown group:../crypto/ec/ec_curve.c:3100:

amd

ECDH failure.
4146645312:error:100AE081:elliptic curve routines:EC_GROUP_new_by_curve_name:unknown group:../crypto/ec/ec_curve.c:3100:
4146645312:error:100AE081:elliptic curve routines:EC_GROUP_new_by_curve_name:unknown group:../crypto/ec/ec_curve.c:3100:


The errors seem to be reliably reproducible, with the same error messages
except that in each case the first number changes.




Full output follows:

% openssl speed ecdsa
Doing 160 bit sign ecdsa's for 10s: 94968 160 bit ECDSA signs in 9.98s
Doing 160 bit verify ecdsa's for 10s: 33582 160 bit ECDSA verify in 10.00s
Doing 192 bit sign ecdsa's for 10s: 94465 192 bit ECDSA signs in 10.00s
Doing 192 bit verify ecdsa's for 10s: 25142 192 bit ECDSA verify in 9.98s
Doing 224 bit sign ecdsa's for 10s: 72176 224 bit ECDSA signs in 10.00s
Doing 224 bit verify ecdsa's for 10s: 18713 224 bit ECDSA verify in 10.00s
Doing 256 bit sign ecdsa's for 10s: 115773 256 bit ECDSA signs in 9.98s
Doing 256 bit verify ecdsa's for 10s: 50658 256 bit ECDSA verify in 10.00s
Doing 384 bit sign ecdsa's for 10s: 24252 384 bit ECDSA signs in 9.98s
Doing 384 bit verify ecdsa's for 10s: 6327 384 bit ECDSA verify in 10.00s
Doing 521 bit sign ecdsa's for 10s: 11092 521 bit ECDSA signs in 10.00s
Doing 521 bit verify ecdsa's for 10s: 2917 521 bit ECDSA verify in 10.00s
Doing 163 bit sign ecdsa's for 10s: 39258 163 bit ECDSA signs in 10.00s
Doing 163 bit verify ecdsa's for 10s: 16076 163 bit ECDSA verify in 10.00s
Doing 233 bit sign ecdsa's for 10s: 20407 233 bit ECDSA signs in 10.00s
Doing 233 bit verify ecdsa's for 10s: 9629 233 bit ECDSA verify in 10.00s
Doing 283 bit sign ecdsa's for 10s: 13373 283 bit ECDSA signs in 10.00s
Doing 283 bit verify ecdsa's for 10s: 5377 283 bit ECDSA verify in 10.00s
Doing 409 bit sign ecdsa's for 10s: 5472 409 bit ECDSA signs in 10.00s
Doing 409 bit verify ecdsa's for 10s: 2708 409 bit ECDSA verify in 10.00s
Doing 571 bit sign ecdsa's for 10s: 2251 571 bit ECDSA signs in 10.00s
Doing 571 bit verify ecdsa's for 10s: 1144 571 bit ECDSA verify in 10.00s
Doing 163 bit sign ecdsa's for 10s: 39505 163 bit ECDSA signs in 9.98s
Doing 163 bit verify ecdsa's for 10s: 15082 163 bit ECDSA verify in 10.00s
Doing 233 bit sign ecdsa's for 10s: 20490 233 bit ECDSA signs in 10.00s
Doing 233 bit verify ecdsa's for 10s: 8940 233 bit ECDSA verify in 10.00s
Doing 283 bit sign ecdsa's for 10s: 13441 283 bit ECDSA signs in 9.98s
Doing 283 bit verify ecdsa's for 10s: 4926 283 bit ECDSA verify in 9.98s
Doing 409 bit sign ecdsa's for 10s: 5451 409 bit ECDSA signs in 10.00s
Doing 409 bit verify ecdsa's for 10s: 2447 409 bit ECDSA verify in 10.00s
Doing 571 bit sign ecdsa's for 10s: 2282 571 bit ECDSA signs in 10.00s
Doing 571 bit verify ecdsa's for 10s: 1020 571 bit ECDSA verify in 10.00s
ECDSA failure.
4146407744:error:100AE081:elliptic curve routines:EC_GROUP_new_by_curve_name:unknown group:../crypto/ec/ec_curve.c:3100:
OpenSSL 1.1.0f  25 May 2017
built on: reproducible build, date unspecified
options:bn(64,32) rc4(8x,mmx) des(long) aes(partial) blowfish(ptr)
compiler: gcc -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_THREADS -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_BN_ASM_PART_WORDS -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DRMD160_ASM -DAES_ASM -DVPAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSLDIR="\"/usr/lib/ssl\"" -DENGINESDIR="\"/usr/lib/i386-linux-gnu/engines-1.1\""
                              sign    verify    sign/s verify/s
 160 bit ecdsa (secp160r1)   0.0001s   0.0003s   9515.8   3358.2
 192 bit ecdsa (nistp192)   0.0001s   0.0004s   9446.5   2519.2
 224 bit ecdsa (nistp224)   0.0001s   0.0005s   7217.6   1871.3
 256 bit ecdsa (nistp256)   0.0001s   0.0002s  11600.5   5065.8
 384 bit ecdsa (nistp384)   0.0004s   0.0016s   2430.1    632.7
 521 bit ecdsa (nistp521)   0.0009s   0.0034s   1109.2    291.7
 163 bit ecdsa (nistk163)   0.0003s   0.0006s   3925.8   1607.6
 233 bit ecdsa (nistk233)   0.0005s   0.0010s   2040.7    962.9
 283 bit ecdsa (nistk283)   0.0007s   0.0019s   1337.3    537.7
 409 bit ecdsa (nistk409)   0.0018s   0.0037s    547.2    270.8
 571 bit ecdsa (nistk571)   0.0044s   0.0087s    225.1    114.4
 163 bit ecdsa (nistb163)   0.0003s   0.0007s   3958.4   1508.2
 233 bit ecdsa (nistb233)   0.0005s   0.0011s   2049.0    894.0
 283 bit ecdsa (nistb283)   0.0007s   0.0020s   1346.8    493.6
 409 bit ecdsa (nistb409)   0.0018s   0.0041s    545.1    244.7
 571 bit ecdsa (nistb571)   0.0044s   0.0098s    228.2    102.0
 253 bit ecdsa (X25519)   0.0000s   0.0000s      inf      inf

% openssl speed ecdh
Doing 160 bit  ecdh's for 10s: 40040 160-bit ECDH ops in 9.98s
Doing 192 bit  ecdh's for 10s: 29780 192-bit ECDH ops in 10.00s
Doing 224 bit  ecdh's for 10s: 23319 224-bit ECDH ops in 10.00s
Doing 256 bit  ecdh's for 10s: 66411 256-bit ECDH ops in 10.00s
Doing 384 bit  ecdh's for 10s: 7515 384-bit ECDH ops in 10.00s
Doing 521 bit  ecdh's for 10s: 3474 521-bit ECDH ops in 10.00s
Doing 163 bit  ecdh's for 10s: 33157 163-bit ECDH ops in 10.00s
Doing 233 bit  ecdh's for 10s: 19969 233-bit ECDH ops in 10.00s
Doing 283 bit  ecdh's for 10s: 10910 283-bit ECDH ops in 10.00s
Doing 409 bit  ecdh's for 10s: 5508 409-bit ECDH ops in 10.00s
Doing 571 bit  ecdh's for 10s: 2263 571-bit ECDH ops in 10.00s
Doing 163 bit  ecdh's for 10s: 30563 163-bit ECDH ops in 10.00s
Doing 233 bit  ecdh's for 10s: 18374 233-bit ECDH ops in 10.00s
Doing 283 bit  ecdh's for 10s: 9918 283-bit ECDH ops in 10.00s
Doing 409 bit  ecdh's for 10s: 4896 409-bit ECDH ops in 10.00s
Doing 571 bit  ecdh's for 10s: 2038 571-bit ECDH ops in 10.00s
ECDH failure.
4146645312:error:100AE081:elliptic curve routines:EC_GROUP_new_by_curve_name:unknown group:../crypto/ec/ec_curve.c:3100:
4146645312:error:100AE081:elliptic curve routines:EC_GROUP_new_by_curve_name:unknown group:../crypto/ec/ec_curve.c:3100:
OpenSSL 1.1.0f  25 May 2017
built on: reproducible build, date unspecified
options:bn(64,32) rc4(8x,mmx) des(long) aes(partial) blowfish(ptr)
compiler: gcc -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_THREADS -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_BN_ASM_PART_WORDS -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DRMD160_ASM -DAES_ASM -DVPAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSLDIR="\"/usr/lib/ssl\"" -DENGINESDIR="\"/usr/lib/i386-linux-gnu/engines-1.1\""
                              op      op/s
 160 bit ecdh (secp160r1)   0.0002s   4012.0
 192 bit ecdh (nistp192)   0.0003s   2978.0
 224 bit ecdh (nistp224)   0.0004s   2331.9
 256 bit ecdh (nistp256)   0.0002s   6641.1
 384 bit ecdh (nistp384)   0.0013s    751.5
 521 bit ecdh (nistp521)   0.0029s    347.4
 163 bit ecdh (nistk163)   0.0003s   3315.7
 233 bit ecdh (nistk233)   0.0005s   1996.9
 283 bit ecdh (nistk283)   0.0009s   1091.0
 409 bit ecdh (nistk409)   0.0018s    550.8
 571 bit ecdh (nistk571)   0.0044s    226.3
 163 bit ecdh (nistb163)   0.0003s   3056.3
 233 bit ecdh (nistb233)   0.0005s   1837.4
 283 bit ecdh (nistb283)   0.0010s    991.8
 409 bit ecdh (nistb409)   0.0020s    489.6
 571 bit ecdh (nistb571)   0.0049s    203.8



-- System Information:
Debian Release: 9.0
  APT prefers stable
  APT policy: (500, 'stable'), (200, 'experimental')
Architecture: i386 (x86_64)
Foreign Architectures: amd64

Kernel: Linux 4.9.0-3-amd64 (SMP w/4 CPU cores)
Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE=C (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages openssl depends on:
ii  libc6      2.24-11+deb9u1
ii  libssl1.1  1.1.0f-3

openssl recommends no packages.

Versions of packages openssl suggests:
ii  ca-certificates  20161130+nmu1

-- no debconf information



More information about the Pkg-openssl-devel mailing list