diff options
| author | slontis <shane.lontis@oracle.com> | 2023-02-22 10:11:33 +1000 |
|---|---|---|
| committer | Pauli <pauli@openssl.org> | 2023-02-28 14:29:42 +1100 |
| commit | e798248c8461893ba29d97410b7c0dcecbf23d82 (patch) | |
| tree | 0bc5b266282e0d5c83c24c85be95c965a9360c9b /doc/man7/migration_guide.pod | |
| parent | f7d76c3d7d09d95a9ceb5b69c8f951f53237ef78 (diff) | |
| download | openssl-new-e798248c8461893ba29d97410b7c0dcecbf23d82.tar.gz | |
Add provider pre-fetching documentation
Clearly document that implicit fetching is slower when using providers,
and explain prefetching. Added to crypto.pod and migration_guide.pod
links to it.
Add a link to EVP_default_properties_enable_fips() in crypto.pod.
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20354)
Diffstat (limited to 'doc/man7/migration_guide.pod')
| -rw-r--r-- | doc/man7/migration_guide.pod | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/doc/man7/migration_guide.pod b/doc/man7/migration_guide.pod index c1d47737c1..bad1eab873 100644 --- a/doc/man7/migration_guide.pod +++ b/doc/man7/migration_guide.pod @@ -209,6 +209,15 @@ All new applications should use the new L<EVP_MAC(3)> interface. See also L<OSSL_PROVIDER-default(7)/Message Authentication Code (MAC)> and L<OSSL_PROVIDER-FIPS(7)/Message Authentication Code (MAC)>. +=head4 Algorithm Fetching + +Using calls to convenience functions such as EVP_sha256() and EVP_aes_256_gcm() may +incur a performance penalty when using providers. +Retrieving algorithms from providers involves searching for an algorithm by name. +This is much slower than directly accessing a method table. +It is recommended to prefetch algorithms if an algorithm is used many times. +See L<crypto(7)/Performance>, L<crypto(7)/Explicit fetching> and L<crypto(7)/Implicit fetching>. + =head4 Support for Linux Kernel TLS In order to use KTLS, support for it must be compiled in using the |