OpenSSL 1.1.0f 25 May 2017 OpenSSL 1.0.1e-fips 11 Feb 2013性能比较

[root@localhost nginx]# openssl speed  aes rsa ecdh 
Doing aes-128 cbc for 3s on 16 size blocks: 16679878 aes-128 cbc's in 3.00s
Doing aes-128 cbc for 3s on 64 size blocks: 4601182 aes-128 cbc's in 3.00s
Doing aes-128 cbc for 3s on 256 size blocks: 1167838 aes-128 cbc's in 3.00s
Doing aes-128 cbc for 3s on 1024 size blocks: 294638 aes-128 cbc's in 3.00s
Doing aes-128 cbc for 3s on 8192 size blocks: 36975 aes-128 cbc's in 3.00s
Doing aes-192 cbc for 3s on 16 size blocks: 11704218 aes-192 cbc's in 3.00s
Doing aes-192 cbc for 3s on 64 size blocks: 3223352 aes-192 cbc's in 3.00s
Doing aes-192 cbc for 3s on 256 size blocks: 973330 aes-192 cbc's in 3.00s
Doing aes-192 cbc for 3s on 1024 size blocks: 246780 aes-192 cbc's in 3.00s
Doing aes-192 cbc for 3s on 8192 size blocks: 31052 aes-192 cbc's in 3.01s
Doing aes-256 cbc for 3s on 16 size blocks: 12310239 aes-256 cbc's in 3.00s
Doing aes-256 cbc for 3s on 64 size blocks: 3246100 aes-256 cbc's in 3.00s
Doing aes-256 cbc for 3s on 256 size blocks: 780716 aes-256 cbc's in 3.00s
Doing aes-256 cbc for 3s on 1024 size blocks: 207292 aes-256 cbc's in 3.00s
Doing aes-256 cbc for 3s on 8192 size blocks: 25847 aes-256 cbc's in 3.00s
Doing 512 bit private rsa's for 10s: 135941 512 bit private RSA's in 10.00s
Doing 512 bit public rsa's for 10s: 1735105 512 bit public RSA's in 10.01s
Doing 1024 bit private rsa's for 10s: 34489 1024 bit private RSA's in 10.00s
Doing 1024 bit public rsa's for 10s: 657315 1024 bit public RSA's in 10.00s
Doing 2048 bit private rsa's for 10s: 5079 2048 bit private RSA's in 10.00s
Doing 2048 bit public rsa's for 10s: 189215 2048 bit public RSA's in 10.00s
Doing 4096 bit private rsa's for 10s: 742 4096 bit private RSA's in 10.00s
Doing 4096 bit public rsa's for 10s: 50286 4096 bit public RSA's in 10.01s
Doing 256 bit  ecdh's for 10s: 20388 256-bit ECDH ops in 10.01s
Doing 384 bit  ecdh's for 10s: 9909 384-bit ECDH ops in 10.00s
Doing 521 bit  ecdh's for 10s: 4390 521-bit ECDH ops in 10.01s
OpenSSL 1.0.1e-fips 11 Feb 2013
built on: Wed Mar 22 21:43:28 UTC 2017
options:bn(64,64) md2(int) rc4(16x,int) des(idx,cisc,16,int) aes(partial) idea(int) blowfish(idx) 
compiler: gcc -fPIC -DOPENSSL_PIC -DZLIB -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DKRB5_MIT -m64 -DL_ENDIAN -DTERMIO -Wall -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic -Wa,--noexecstack -DPURIFY -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-128 cbc      88959.35k    98158.55k    99655.51k   100569.77k   100966.40k
aes-192 cbc      62422.50k    68764.84k    83057.49k    84234.24k    84510.96k
aes-256 cbc      65654.61k    69250.13k    66621.10k    70755.67k    70579.54k
                  sign    verify    sign/s verify/s
rsa  512 bits 0.000074s 0.000006s  13594.1 173337.2
rsa 1024 bits 0.000290s 0.000015s   3448.9  65731.5
rsa 2048 bits 0.001969s 0.000053s    507.9  18921.5
rsa 4096 bits 0.013477s 0.000199s     74.2   5023.6
                              op      op/s
 256 bit ecdh (nistp256)   0.0005s   2036.8
 384 bit ecdh (nistp384)   0.0010s    990.9

 521 bit ecdh (nistp521)   0.0023s    438.6

OpenSSL 1.1.0f  25 May 2017
built on: reproducible build, date unspecified
options:bn(64,64) rc4(16x,int) des(int) aes(partial) idea(int) blowfish(ptr) 
compiler: gcc -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_THREADS -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSLDIR="\"/usr/local/openssl/ssl\"" -DENGINESDIR="\"/usr/local/openssl/lib/engines-1.1\""  -Wa,--noexecstack
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes  16384 bytes
aes-128 cbc      85898.71k    92601.39k    92468.14k    85888.34k    90480.64k    90346.84k
aes-192 cbc      68557.38k    78612.60k    76771.93k    75198.12k    73673.39k    73394.86k
aes-256 cbc      53228.77k    65482.94k    65212.07k    66468.18k    68910.78k    65208.32k
                  sign    verify    sign/s verify/s
rsa  512 bits 0.000080s 0.000006s  12451.3 155544.7
rsa 1024 bits 0.000236s 0.000014s   4244.2  71346.1
rsa 2048 bits 0.001483s 0.000043s    674.1  23240.1
rsa 3072 bits 0.004558s 0.000091s    219.4  10960.8
rsa 4096 bits 0.010362s 0.000156s     96.5   6405.4
rsa 7680 bits 0.082131s 0.000519s     12.2   1926.7
rsa 15360 bits 0.487619s 0.002083s      2.1    480.0
                              op      op/s
 160 bit ecdh (secp160r1)   0.0003s   3623.7
 192 bit ecdh (nistp192)   0.0003s   3019.3
 224 bit ecdh (nistp224)   0.0005s   2163.7
 256 bit ecdh (nistp256)   0.0001s   7237.6
 384 bit ecdh (nistp384)   0.0012s    816.3
 521 bit ecdh (nistp521)   0.0026s    389.6
 163 bit ecdh (nistk163)   0.0004s   2442.3
 233 bit ecdh (nistk233)   0.0004s   2285.5
 283 bit ecdh (nistk283)   0.0008s   1253.2
 409 bit ecdh (nistk409)   0.0014s    715.0
 571 bit ecdh (nistk571)   0.0031s    327.4
 163 bit ecdh (nistb163)   0.0003s   2861.6
 233 bit ecdh (nistb233)   0.0004s   2359.2
 283 bit ecdh (nistb283)   0.0008s   1287.5
 409 bit ecdh (nistb409)   0.0012s    820.8
 571 bit ecdh (nistb571)   0.0029s    345.5
 253 bit ecdh (X25519)   0.0000s      inf

OpenSSL 1.1.0f  性能比 旧版本要低些，，怪事儿了。