[externals, core] launch mbedtls into geostationary orbit #3137

New issue

Open

opened 2025-12-03 06:36:10 +01:00 by crueter · 1 comment

crueter commented

2025-12-03 06:36:10 +01:00

Owner

Issue

mbedtls is slow, causes us more problems than it solves, and we... basically already require OpenSSL. So why not just use OpenSSL? With my CIs the packaging situation is basically perfect, so it's not like "oh some systems might not have an openssl available"... if it doesn't, just add a VM to crueter-ci/OpenSSL.

### Issue mbedtls is slow, causes us more problems than it solves, and we... basically already require OpenSSL. So why not just use OpenSSL? With my CIs the packaging situation is basically perfect, so it's not like "oh some systems might not have an openssl available"... if it doesn't, just add a VM to crueter-ci/OpenSSL.

Lizzie commented

2025-12-03 06:53:47 +01:00

Member

Just for anyone wondering:
In theory, mbedtls is faster.
In practice its compiled like garbage and OpenSSL does better than it anyways (with LTO + AES)

Just for anyone wondering: In theory, mbedtls is faster. In practice its compiled like garbage and OpenSSL does better than it anyways (with LTO + AES)