vrr/g3
2
0
Fork 0
mirror of https://github.com/bytedance/g3.git synced 2026-05-04 22:51:02 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 6
g3/doc/openssl-variants.md
Zhang Jingqiang baddd3280a require aarch64 neon and aes feature by default
2025-01-05 19:29:02 +08:00

1.6 KiB
Raw Blame History

OpenSSL Variants

There are many forks of OpenSSL available, this doc will show you how to build with them.

Vendored OpenSSL

You can use --features vendored-openssl cargo build option to always use the latest stable OpenSSL version.

It is also recommended to set the following C compile options:

  • x86-64

    -march=x86-64-v2

  • aarch64

    -march=armv8-a+aes

Tongsuo

See Tongsuo for more introduction.

When

If you want to support the following protocols:

  • GB/T 38636-2020, TLCP
  • RFC 8998, TLS1.3 + SM2

then you need to use Tongsuo.

How

Build

Use --features vendored-tongsuo cargo build option.

BoringSSL

See BoringSSL for more introduction.

When

OpenSSL below 3.0 is not supported anymore, but the 3.0 - 3.2 versions all have significant performance degradation. As an alternative, you can switch to use BoringSSl as a solution.

How

Build

  • Make sure you have cmake, pkg-configinstalled

  • Build with --features vendored-boringssl cargo option

AWS-LC

See AWS-LC for more introduction.

When

OpenSSL below 3.0 is not supported anymore, but the 3.0 - 3.2 versions all have significant performance degradation. As an alternative, you can switch to use AWS-LC as a solution on AWS EC2 hosts.

How

Build

  • Make sure you have cmake, pkg-config installed

  • Install a recent version of go if you want to do AWS-LC code generation.

  • Build with --no-default-features --features vendored-aws-lc,rustls-aws-lc,<other features> cargo build option.