64-bit openssl optimization for ECDH

[Fitz Mutch]

@RMerlin, I'm running 64-bit version of Tor on the RT-AC86U. There's a log notice suggesting a possible ECDH optimization for 64-bit CPUs. Did you try it for IPSEC ? I think I tried compiling openssl (aarch64) with enable-ec_nistp_64_gcc_128, but something was missing.

Feb 24 00:07:58.000 [notice] We were built to run on a 64-bit CPU, with OpenSSL 1.0.1 or later, but with a version of OpenSSL that apparently lacks accelerated support for the NIST P-224 and P-256 groups. Building openssl with such support (using the enable-ec_nistp_64_gcc_128 option when configuring it) would make ECDH much faster.

 

[RMerlin]

No, I didn't try it. Not sure Strongswan would make use of that tho.

The documentation mentions a few other requirements for that option - I have no idea if they apply.