openssh installation success

Faheem Mitha faheem at email.unc.edu
Mon Sep 4 15:37:36 EST 2000



On Mon, 4 Sep 2000, Damien Miller wrote:

> On Mon, 4 Sep 2000, Faheem Mitha wrote:
> 
> > 1) I asked a long time ago on the ssh newsgroup whether there was any
> >    way to interactively turn on and off encryption while a ssh session
> >    is going on. The reason was that it might speed things up, and
> >    often in a ssh session one only cares about encrypting the
> >    password. The answer was apparently no, and I am wondering whether
> >    this is still true, and if so, why. Ie. the feature was not added
> >    because it was considered unnecessary, undesirable, or just
> >    impossible to implement within  the current framework
> 
> If you use a fast cipher (e.g blowfish) then you are likely to be able
> to run at wire speeds anyway. On a Celery 400, Blowfish can push 13 
> megabytes per second:
> 
> [damien at neon damien]$ openssl speed bf
> Doing blowfish cbc for 3s on 8 size blocks: 4433946 blowfish cbc's in 2.96s
> Doing blowfish cbc for 3s on 64 size blocks: 631695 blowfish cbc's in 2.94s
> Doing blowfish cbc for 3s on 256 size blocks: 159063 blowfish cbc's in 2.96s
> Doing blowfish cbc for 3s on 1024 size blocks: 40825 blowfish cbc's in 2.98s
> Doing blowfish cbc for 3s on 8192 size blocks: 4981 blowfish cbc's in 2.96s
> OpenSSL 0.9.5a 1 Apr 2000
> built on: Wed Aug  9 10:17:01 EST 2000
> options:bn(64,32) md2(int) rc4(idx,int) des(ptr,risc1,16,long) idea(int) blowfish(idx) 
> compiler: gcc -fPIC -DTHREADS -D_REENTRANT -DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -m486 -Wall -DSHA1_ASM -DMD5_ASM -DRMD160_ASM
> The 'numbers' are in 1000s of bytes per second processed.
> type              8 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
> blowfish cbc     11983.64k    13751.18k    13756.80k    14028.46k    13785.25k

The same command gives me

faheem ~>openssl speed bf
Doing blowfish cbc for 3s on 8 size blocks: 2639671 blowfish cbc's in
3.00s
Doing blowfish cbc for 3s on 64 size blocks: 260730 blowfish cbc's in
2.20s
Doing blowfish cbc for 3s on 256 size blocks: 81753 blowfish cbc's in
2.57s
Doing blowfish cbc for 3s on 1024 size blocks: 24267 blowfish cbc's in
3.00s
Doing blowfish cbc for 3s on 8192 size blocks: 3039 blowfish cbc's in
3.00s
OpenSSL 0.9.5a 1 Apr 2000
built on: Sat Sep  2 23:50:30 EDT 2000
options:bn(64,32) md2(int) rc4(idx,int) des(ptr,risc1,16,long)
idea(int) blowfish(idx) 
compiler: gcc -fPIC -DTHREADS -D_REENTRANT -DL_ENDIAN -DTERMIO -O3
-fomit-frame-pointer -m486 -Wall -DSHA1_ASM -DMD5_ASM -DRMD160_ASM
The 'numbers' are in 1000s of bytes per second processed.
type           8 bytes     64 bytes    256 bytes   1024 bytes 8192 bytes
blowfish cbc   7039.12k     8260.75k     8143.49k   8283.14k 8298.50k

But I am not sure what this is telling me. My modem is a little bit
elderly and slow, by the way, which may explain why my numbers are
smaller than yours.

                                         Faheem.   






More information about the openssh-unix-dev mailing list