From: "Li, Yi" <yi1.li@intel.com>
To: devel@edk2.groups.io
Cc: Yi Li <yi1.li@intel.com>
Subject: [edk2-staging/OpenSSL11_EOL 7/7] Readme: 0317 update
Date: Fri, 17 Mar 2023 12:28:19 +0800 [thread overview]
Message-ID: <fa7f620e8cb884c62ada791dc5c44db90f571fba.1679026329.git.yi1.li@intel.com> (raw)
In-Reply-To: <cover.1679026329.git.yi1.li@intel.com>
Signed-off-by: Yi Li <yi1.li@intel.com>
---
CryptoPkg/Readme-OpenSSL3.0.md | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/CryptoPkg/Readme-OpenSSL3.0.md b/CryptoPkg/Readme-OpenSSL3.0.md
index 3d4afa8ac1..85ed37b61d 100644
--- a/CryptoPkg/Readme-OpenSSL3.0.md
+++ b/CryptoPkg/Readme-OpenSSL3.0.md
@@ -6,9 +6,9 @@ Need to upgrade OpenSsl to 3.0.X before 1.1.1 support stopping.
Initial build with OpenSSL 3.0.X showed significant size increase versus OpenSSL 1.1.1, details as (Build based on Intel platform):
|Driver | 1.1.1 | 3.0 | percent |
|-----------------|------------|------------|------------|
-|CryptoDxeFull | 1014 | 1578 | 57% |
|CryptoPei | 386 | 794 | 106% |
|CryptoPeiPreMem | 31 | 417 | 1245% |
+|CryptoDxeFull | 1014 | 1578 | 57% |
|CryptoDxe | 804 | 1278 | 59% |
|CryptoSmm | 558 | 986 | 77% |
@@ -21,6 +21,7 @@ Will update latest result here (Build based on Intel platform).
|-----------------|------------|------------|------------|
|CryptoPei | 386 | 398 | 3.1% |
|CryptoPeiPreMem | 31 | 31 | 0% |
+|CryptoDxeFull | 1014 | 1031 | 1.7% |
|CryptoDxe | 804 | 886 | 10.1% |
|CryptoSmm | 558 | 604 | 8.2% |
@@ -34,7 +35,7 @@ Will update latest result here (Build based on Intel platform).
1. This package is only the sample code to show the concept. It does not have a full validation and meet the production quality yet.
Any codes including the API definition, the library and the drivers are subject to change.
-2. Only OpensslLib.inf(For DXE SMM) and OpensslLibMin.inf(For PEI) passed Crypto Unit Test, no other tests.
+2. Only passed Crypto Unit Test, no other tests.
3. There are some changes that require a more elegant implementation or upstream to openssl.
For convenience, openssl submodule currently uses Owner's private branch:
https://github.com/liyi77/openssl/tree/openssl-3.0-POC
@@ -78,7 +79,6 @@ Removing unnecessary data can reduce the size by ~50KB.
1. DXE and SMM use more functions than PEI, so can only reduce fewer size.
2. Need a detailed script or readme. The best way is to automatically cut through openssl config, raised issue in community:
https://github.com/openssl/openssl/issues/20260
-3. Will break Authticode API if applied to DXE SMM.
### 5.Hash API downgrade (for PeiPreMem)
High level API (EVP) will introduce provider and NID mapping which can increase size extremely.
--
2.31.1.windows.1
next prev parent reply other threads:[~2023-03-17 4:28 UTC|newest]
Thread overview: 12+ messages / expand[flat|nested] mbox.gz Atom feed top
2023-03-17 4:28 [edk2-staging/OpenSSL11_EOL 0/7] Openssl 3.0 POC update Mar 17 Li, Yi
2023-03-17 4:28 ` [edk2-staging/OpenSSL11_EOL 1/7] OpensslLib: remove bio prov Li, Yi
2023-03-17 4:28 ` [edk2-staging/OpenSSL11_EOL 2/7] CryptoPkg/Test: Remove Pem and Pkcs7Sign func in test Li, Yi
2023-03-17 4:28 ` [edk2-staging/OpenSSL11_EOL 3/7] CryptoPkg/OpensslLib: enable no autoalginit Li, Yi
2023-03-17 4:28 ` [edk2-staging/OpenSSL11_EOL 4/7] Readme: 0315 update Li, Yi
2023-03-17 4:28 ` [edk2-staging/OpenSSL11_EOL 5/7] bugfix: The order of NIDs should remain the same as before Li, Yi
2023-03-17 4:28 ` [edk2-staging/OpenSSL11_EOL 6/7] CryptoPkg/OpensslLibFull: apply all work to full inf Li, Yi
2023-03-17 4:28 ` Li, Yi [this message]
2023-03-17 10:03 ` [edk2-staging/OpenSSL11_EOL 0/7] Openssl 3.0 POC update Mar 17 Gerd Hoffmann
2023-03-17 10:20 ` Yao, Jiewen
2023-03-17 10:21 ` Li, Yi
2023-04-01 18:27 ` [edk2-devel] " Rebecca Cran
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-list from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=fa7f620e8cb884c62ada791dc5c44db90f571fba.1679026329.git.yi1.li@intel.com \
--to=devel@edk2.groups.io \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox