I tested the noble version on ppc64el before and after enabling proposed. There
is a significant difference in speed for 224 and 521 bits. I am updating tag to
verification-done-noble. Full output is below.
before
===========
ubuntu@ravi-sharma-sru-verification-2130576:~$ taskset -c 0 openssl speed
-elapsed -seconds 10 ecdsap224 ecdhp224 ecdsap256 ecdhp256 ecdsap384 ecdhp384
ecdsap521 ecdhp521
You have chosen to measure elapsed time instead of user CPU time.
Doing 224 bits sign ecdsa's for 10s: 22960 224 bits ECDSA signs in 10.00s
Doing 224 bits verify ecdsa's for 10s: 24113 224 bits ECDSA verify in 10.01s
Doing 256 bits sign ecdsa's for 10s: 285476 256 bits ECDSA signs in 10.00s
Doing 256 bits verify ecdsa's for 10s: 97301 256 bits ECDSA verify in 10.00s
Doing 384 bits sign ecdsa's for 10s: 7660 384 bits ECDSA signs in 10.00s
Doing 384 bits verify ecdsa's for 10s: 9274 384 bits ECDSA verify in 10.00s
Doing 521 bits sign ecdsa's for 10s: 3192 521 bits ECDSA signs in 10.00s
Doing 521 bits verify ecdsa's for 10s: 4054 521 bits ECDSA verify in 10.00s
Doing 224 bits ecdh's for 10s: 24554 224-bits ECDH ops in 10.00s
Doing 256 bits ecdh's for 10s: 127496 256-bits ECDH ops in 10.00s
Doing 384 bits ecdh's for 10s: 8065 384-bits ECDH ops in 10.00s
Doing 521 bits ecdh's for 10s: 3394 521-bits ECDH ops in 10.00s
version: 3.0.13
built on: Wed Jul 29 16:55:30 2026 UTC
options: bn(64,64)
compiler: gcc -fPIC -pthread -m64 -Wa,--noexecstack -Wall
-fzero-call-used-regs=used-gpr -DOPENSSL_TLS_SECURITY_LEVEL=2 -Wa,--noexecstack
-g -O3 -ffile-prefix-map=/build/openssl-rAaLvH/opens
sl-3.0.13=. -fstack-protector-strong -Wformat -Werror=format-security
-fno-stack-clash-protection
-fdebug-prefix-map=/build/openssl-rAaLvH/openssl-3.0.13=/usr/src/openssl-3.0.13-0ubuntu3.12
-DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_BUILDING_OPENSSL
-DNDEBUG -Wdate-time -D_FORTIFY_SOURCE=3
CPUINFO: N/A
sign verify sign/s verify/s
224 bits ecdsa (nistp224) 0.0004s 0.0004s 2296.0 2408.9
256 bits ecdsa (nistp256) 0.0000s 0.0001s 28547.6 9730.1
384 bits ecdsa (nistp384) 0.0013s 0.0011s 766.0 927.4
521 bits ecdsa (nistp521) 0.0031s 0.0025s 319.2 405.4
op op/s
224 bits ecdh (nistp224) 0.0004s 2455.4
256 bits ecdh (nistp256) 0.0001s 12749.6
384 bits ecdh (nistp384) 0.0012s 806.5
521 bits ecdh (nistp521) 0.0029s 339.4
ubuntu@ravi-sharma-sru-verification-2130576:~$
after
===========
ubuntu@ravi-sharma-sru-verification-2130576:~$ taskset -c 0 openssl speed
-elapsed -seconds 10 ecdsap224 ecdhp224 ecdsap256 ecdhp256 ecdsap384 ecdhp384
ecdsap521 ecdhp521
You have chosen to measure elapsed time instead of user CPU time.
Doing 224 bits sign ecdsa's for 10s: 146343 224 bits ECDSA signs in 10.00s
Doing 224 bits verify ecdsa's for 10s: 68947 224 bits ECDSA verify in 10.00s
Doing 256 bits sign ecdsa's for 10s: 282605 256 bits ECDSA signs in 10.00s
Doing 256 bits verify ecdsa's for 10s: 96806 256 bits ECDSA verify in 10.00s
Doing 384 bits sign ecdsa's for 10s: 7640 384 bits ECDSA signs in 10.00s
Doing 384 bits verify ecdsa's for 10s: 9250 384 bits ECDSA verify in 10.00s
Doing 521 bits sign ecdsa's for 10s: 27578 521 bits ECDSA signs in 10.00s
Doing 521 bits verify ecdsa's for 10s: 16047 521 bits ECDSA verify in 10.00s
Doing 224 bits ecdh's for 10s: 104599 224-bits ECDH ops in 10.00s
Doing 256 bits ecdh's for 10s: 127618 256-bits ECDH ops in 10.00s
Doing 384 bits ecdh's for 10s: 8092 384-bits ECDH ops in 10.00s
Doing 521 bits ecdh's for 10s: 29829 521-bits ECDH ops in 10.00s
version: 3.0.13
built on: Wed Aug 5 10:04:50 2026 UTC
options: bn(64,64)
compiler: gcc -fPIC -pthread -m64 -Wa,--noexecstack -Wall
-fzero-call-used-regs=used-gpr -DOPENSSL_TLS_SECURITY_LEVEL=2 -Wa,--noexecstack
-g -O3 -ffile-prefix-map=/build/openssl-7iIIv5/openssl-3.0.13=.
-fstack-protector-strong -Wformat -Werror=format-security
-fno-stack-clash-protection
-fdebug-prefix-map=/build/openssl-7iIIv5/openssl-3.0.13=/usr/src/openssl-3.0.13-0ubuntu3.13
-DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_BUILDING_OPENSSL
-DNDEBUG -Wdate-time -D_FORTIFY_SOURCE=3
CPUINFO: N/A
sign verify sign/s verify/s
224 bits ecdsa (nistp224) 0.0001s 0.0001s 14634.3 6894.7
256 bits ecdsa (nistp256) 0.0000s 0.0001s 28260.5 9680.6
384 bits ecdsa (nistp384) 0.0013s 0.0011s 764.0 925.0
521 bits ecdsa (nistp521) 0.0004s 0.0006s 2757.8 1604.7
op op/s
224 bits ecdh (nistp224) 0.0001s 10459.9
256 bits ecdh (nistp256) 0.0001s 12761.8
384 bits ecdh (nistp384) 0.0012s 809.2
521 bits ecdh (nistp521) 0.0003s 2982.9
ubuntu@ravi-sharma-sru-verification-2130576:~$
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2130576
Title:
Missing ec_nistp_64_gcc_128 optimization on non-x86_64 architectures
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/2130576/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
