Commit 1baf25d
committed
modules/openssl: Optimize build size by disabling unused cryptographic algorithms
Reduce OpenSSL libcrypto.so.3 size by 103KB (3.1%) through aggressive
algorithm disabling via configure flags. Removed unused cryptographic
algorithms while maintaining compatibility with TPM2-TSS requirements.
Disabled algorithms:
- Legacy ciphers: DES, RC2/RC4, IDEA, Blowfish, CAST
- Hash functions: MD2/MD4/MD5, RIPEMD160, Whirlpool
- Modern algorithms: ChaCha20, Poly1305, ARIA, Camellia
- Elliptic curves: EC2M curves, SM2/SM4 Chinese algorithms
- Key exchange: DH, DSA, SRP, GOST
- Protocol versions: SSL 3.0, TLS 1.0/1.1
- Advanced features: OCB, SIV, CMAC, BLAKE2, engines
Size impact:
- libcrypto.so.3: 3,280,536 → 3,177,880 bytes (-103KB, -3.1%)
- tools.cpio total: ~621KB cumulative savings vs master
Maintains required algorithms for TPM2 operations (SHA, AES, SM3).
Signed-off-by: Thierry Laurion <insurgo@riseup.net>1 parent 953d2b7 commit 1baf25d
1 file changed
Lines changed: 9 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
25 | 25 | | |
26 | 26 | | |
27 | 27 | | |
| 28 | + | |
| 29 | + | |
28 | 30 | | |
29 | 31 | | |
| 32 | + | |
| 33 | + | |
30 | 34 | | |
| 35 | + | |
31 | 36 | | |
32 | 37 | | |
33 | 38 | | |
| |||
41 | 46 | | |
42 | 47 | | |
43 | 48 | | |
| 49 | + | |
| 50 | + | |
44 | 51 | | |
| 52 | + | |
| 53 | + | |
45 | 54 | | |
46 | 55 | | |
47 | 56 | | |
| |||
0 commit comments