On Thu, 2023-11-23 at 21:19 +0100, Niels Möller wrote: > The hogweed-benchmark code for benchmarking OpenSSL uses several > functions that have been deprecated in OpenSSL 3.0, like RSA_new(). I've > spent some hour attempting to update it to non-deprecated functions, but > I'm having a really hard time navigating the openssl apis and > documentation. > > I've not yet been able to even generate an RSA key, using openssl > functions like EVP_PKEY_CTX_new_from_name, EVP_PKEY_keygen_init, > EVP_PKEY_CTX_set_rsa_keygen_bits, etc. > > Is there anyone on the list familiar with OpenSSL that could help with > this update? > > And related question: Do you see a value in hogweed-benchmark (and > nettle-benchmark) running comparative benchmarks to OpenSSL? Otherwise, > maybe it's not worth the effort to keep and maintain that code.
Hi Niels, I do see some value and I can help you with that. This code here generates RSA keys using the modern API: https://github.com/latchset/pkcs11-provider/blob/main/tests/tgenkey.c#L129 (Ignore the pkcs11_uri params, that's special stuff for the pkcs11 provider). You just need the "rsa_keygen_bits" parameters for RSA generation. HTH, Simo. -- Simo Sorce, DE @ RHEL Crypto Team, Red Hat, Inc _______________________________________________ nettle-bugs mailing list -- nettle-bugs@lists.lysator.liu.se To unsubscribe send an email to nettle-bugs-le...@lists.lysator.liu.se