[edk2-devel] [edk2-staging/OpenSSL11_EOL][PATCH 0/4] Openssl 3.0 POC update Apr 4

Li, Yi posted 4 patches 1 year ago
Failed in applying to current master (apply log)
CryptoPkg/Library/OpensslLib/OpensslLib.inf   |   6 +-
.../Library/OpensslLib/OpensslLibFull.inf     |   6 +-
.../Library/OpensslLib/OpensslStub/minprov.c  |  30 +-
CryptoPkg/Library/OpensslLib/SslExtServNull.c | 329 ++++++++++++++++++
.../Library/OpensslLib/SslStatServNull.c      | 219 ++++++++++++
CryptoPkg/Readme-OpenSSL3.0.md                |  32 +-
6 files changed, 587 insertions(+), 35 deletions(-)
create mode 100644 CryptoPkg/Library/OpensslLib/SslExtServNull.c
create mode 100644 CryptoPkg/Library/OpensslLib/SslStatServNull.c
[edk2-devel] [edk2-staging/OpenSSL11_EOL][PATCH 0/4] Openssl 3.0 POC update Apr 4
Posted by Li, Yi 1 year ago
Updated POC result and next step.
Please check the patch series if interested.
PR: https://github.com/tianocore/edk2-staging/pull/366

The goal of POC has been reached, next step:
1.  Optimize code quality  
2.  Upstream OpenSsl code change  
3.  Fully validation  

Risk:  
1.  Upstream the openssl code is a long process. if all goes well,
it can be completed before next openssl stable release (July 2023).
If missed, the next stable release will be in September 2023.  
2.  If bugs are found during validation, some size optimization work
will have to be discarded.
This will result in that size increase greater than current result.

## POC result
Binaries mode (use crypto drivers)  
|     Driver      |   1.1.1    |    3.0     |   percent  |  
|-----------------|------------|------------|------------|  
|CryptoPei        |   386      |    400     |    3.6%    |  
|CryptoPeiPreMem  |   31       |    31      |    0%      |  
|CryptoDxeFull    |   1014     |    935     |    -7.7%   |  
|CryptoDxe        |   804      |    813     |    1.2%    |  
|CryptoSmm        |   558      |    587     |    5.2%    |  
  
| LZMA Compressed |   1.1.1    |    3.0     |   percent  |  
|-----------------|------------|------------|------------|  
|CryptoDxe        |   311      |    321     |    3.3%    |  
|CryptoSmm        |   211      |    233     |    10.4%   |  
|FV (Dxe+Smm)     |   357      |    381     |    6.8%    |  

Library mode (use crypto library)  
|     Driver         |   1.1.1    |    3.0     |    delta   |  
|--------------------|------------|------------|------------|  
|      FV            |   2377     |    2636    |     262    |  
|      FV (LZMA)     |   459      |    539     |     80     |  
|SecurityStubDxe.efi |   562      |    605     |     43     |  

Cc: Jiewen Yao <jiewen.yao@intel.com>
Cc: Wenxing Hou <wenxing.hou@intel.com>
Cc: Gerd Hoffmann <kraxel@redhat.com>
Signed-off-by: Yi Li <yi1.li@intel.com>

Yi Li (4):
  CryptoPkg: disabled ssl server
  CryptoPkg: sync latest change in uefiprov to minprov
  Readme: 0330 update
  Readme: update POC result and next step

 CryptoPkg/Library/OpensslLib/OpensslLib.inf   |   6 +-
 .../Library/OpensslLib/OpensslLibFull.inf     |   6 +-
 .../Library/OpensslLib/OpensslStub/minprov.c  |  30 +-
 CryptoPkg/Library/OpensslLib/SslExtServNull.c | 329 ++++++++++++++++++
 .../Library/OpensslLib/SslStatServNull.c      | 219 ++++++++++++
 CryptoPkg/Readme-OpenSSL3.0.md                |  32 +-
 6 files changed, 587 insertions(+), 35 deletions(-)
 create mode 100644 CryptoPkg/Library/OpensslLib/SslExtServNull.c
 create mode 100644 CryptoPkg/Library/OpensslLib/SslStatServNull.c

-- 
2.31.1.windows.1



-=-=-=-=-=-=-=-=-=-=-=-
Groups.io Links: You receive all messages sent to this group.
View/Reply Online (#102473): https://edk2.groups.io/g/devel/message/102473
Mute This Topic: https://groups.io/mt/98056476/1787277
Group Owner: devel+owner@edk2.groups.io
Unsubscribe: https://edk2.groups.io/g/devel/unsub [importer@patchew.org]
-=-=-=-=-=-=-=-=-=-=-=-