]> git.ipfire.org Git - thirdparty/openssl.git/blob - doc/man1/openssl-speed.pod
2b6eb06bf42b65aa2a35692dc4c692e951993de7
[thirdparty/openssl.git] / doc / man1 / openssl-speed.pod
1 =pod
2
3 =head1 NAME
4
5 openssl-speed - test library performance
6
7 =head1 SYNOPSIS
8
9 B<openssl speed>
10 [B<-help>]
11 [B<-engine> I<id>]
12 [B<-elapsed>]
13 [B<-evp> I<algo>]
14 [B<-hmac> I<algo>]
15 [B<-cmac> I<algo>]
16 [B<-decrypt>]
17 [B<-rand> I<file...>]
18 [B<-writerand> I<file>]
19 [B<-primes> I<num>]
20 [B<-seconds> I<num>]
21 [B<-bytes> I<num>]
22 [B<algorithm...>]
23
24 =head1 DESCRIPTION
25
26 This command is used to test the performance of cryptographic algorithms.
27 To see the list of supported algorithms, use the I<list --digest-commands>
28 or I<list --cipher-commands> command. The global CSPRNG is denoted by
29 the I<rand> algorithm name.
30
31 =head1 OPTIONS
32
33 =over 4
34
35 =item B<-help>
36
37 Print out a usage message.
38
39 =item B<-engine> I<id>
40
41 Specifying an engine (by its unique B<id> string) will cause B<speed>
42 to attempt to obtain a functional reference to the specified engine,
43 thus initialising it if needed. The engine will then be set as the default
44 for all available algorithms.
45
46 =item B<-elapsed>
47
48 When calculating operations- or bytes-per-second, use wall-clock time
49 instead of CPU user time as divisor. It can be useful when testing speed
50 of hardware engines.
51
52 =item B<-evp> I<algo>
53
54 Use the specified cipher or message digest algorithm via the EVP interface.
55 If B<algo> is an AEAD cipher, then you can pass <-aead> to benchmark a
56 TLS-like sequence. And if B<algo> is a multi-buffer capable cipher, e.g.
57 aes-128-cbc-hmac-sha1, then B<-mb> will time multi-buffer operation.
58
59 =item B<-hmac> I<digest>
60
61 Time the HMAC algorithm using the specified message digest.
62
63 =item B<-cmac> I<cipher>
64
65 Time the CMAC algorithm using the specified cipher e.g. B<speed -cmac aes128>.
66
67 =item B<-decrypt>
68
69 Time the decryption instead of encryption. Affects only the EVP testing.
70
71 =item B<-rand> I<file...>
72
73 A file or files containing random data used to seed the random number
74 generator.
75 Multiple files can be specified separated by an OS-dependent character.
76 The separator is B<;> for MS-Windows, B<,> for OpenVMS, and B<:> for
77 all others.
78
79 =item B<-writerand> I<file>
80
81 Writes random data to the specified I<file> upon exit.
82 This can be used with a subsequent B<-rand> flag.
83
84 =item B<-primes> I<num>
85
86 Generate a B<num>-prime RSA key and use it to run the benchmarks. This option
87 is only effective if RSA algorithm is specified to test.
88
89 =item B<-seconds> I<num>
90
91 Run benchmarks for B<num> seconds.
92
93 =item B<-bytes> I<num>
94
95 Run benchmarks on B<num>-byte buffers. Affects ciphers, digests and the CSPRNG.
96
97 =item B<algorithm...>
98
99 If any options are given, B<speed> tests those algorithms, otherwise a
100 pre-compiled grand selection is tested.
101
102 =back
103
104 =head1 COPYRIGHT
105
106 Copyright 2000-2019 The OpenSSL Project Authors. All Rights Reserved.
107
108 Licensed under the Apache License 2.0 (the "License"). You may not use
109 this file except in compliance with the License. You can obtain a copy
110 in the file LICENSE in the source distribution or at
111 L<https://www.openssl.org/source/license.html>.
112
113 =cut