[tor-relays] Running tor on OpenBSD with hardware acceleration

Carlin Bingham cb at viennan.net
Wed Sep 14 10:51:14 UTC 2016


On Wed, Sep 14, 2016 at 08:12:15AM +0000, Farid Joubbi wrote:
> Hello,
> 
> 
> I have a relay running on OpenBSD.
> 
> LibreSSL that comes with OpenBSD does not have support for hardware acceleration.
> 
> I get this when I start tor:
> 
> 
> "[notice] We were built to run on a 64-bit CPU, with OpenSSL 1.0.1 or later, but with a version of OpenSSL that apparently lacks accelerated support for the NIST P-224 and P-256 groups. Building openssl with such support (using the enable-ec_nistp_64_gcc_128 option when configuring it) would make ECDH much faster."
> 
> 
> How do I enable support for hardware acceleration?
> 
> My guess is that I have to compile and install OpenSSL, then compile Tor to use the new OpenSSL.
> 
> Does anyone here have any experience with this on OpenBSD?
> 
> Anything that I have missed and should be aware of?
> 
> 
> Thanks.
> 
> 

It's disabled because various compilers produce incorrect code for it
and no one knows for sure which ones are safe to use.

See also: https://marc.info/?l=openbsd-misc&m=142014109006432&w=2


-- 
Carlin


More information about the tor-relays mailing list