Skip to content

Support P256+SHA512 and P384+SHA512 signatures in certificates - #2827

Merged
ctz merged 1 commit into
mainfrom
jbp-p384-sha512-certs
Jan 5, 2026
Merged

Support P256+SHA512 and P384+SHA512 signatures in certificates#2827
ctz merged 1 commit into
mainfrom
jbp-p384-sha512-certs

Conversation

@ctz

@ctz ctz commented Jan 5, 2026 •
edited
Loading

Copy link
Copy Markdown
Member

This allows P256+SHA512 and P384+SHA512 signatures in certificates, when using the aws-lc-rs provider.

Previously, 0.23.32 added support for these in TLS1.2 handshake signatures. This was the topic of #2661 and #2477.

Note that (eg) Mozilla's Root Store Policy disallows such certificates. However, the reported case is a private CA, though the documentation for that CA also specifies that RSA keys are to be used? It's vibe certificates all the way down.

fixes #2825

@rustls-benchmarking

rustls-benchmarking Bot commented Jan 5, 2026 •
edited
Loading

Copy link
Copy Markdown

Benchmark results

Instruction counts

Significant differences

There are no significant instruction count differences

Other differences

Click to expand
Scenario Baseline Candidate Diff Threshold
handshake_session_id_aws_lc_rs_1.3_ecdsap256_chacha_client 50321771 50172673 -149098 (-0.30%) 0.55%
handshake_tickets_aws_lc_rs_1.3_ecdsap384_aes_client 50475818 50344871 -130947 (-0.26%) 0.64%
handshake_no_resume_aws_lc_rs_1.3_rsa_chacha_server 11092945 11064718 -28227 (-0.25%) 1.88%
handshake_no_resume_aws_lc_rs_1.3_ecdsap384_chacha_client 9039848 9017502 -22346 (-0.25%) 1.30%
handshake_tickets_aws_lc_rs_1.3_ecdsap256_chacha_client 50515980 50394539 -121441 (-0.24%) 0.81%
handshake_tickets_aws_lc_rs_1.3_rsa_aes_client 50470568 50349690 -120878 (-0.24%) 0.44%
handshake_tickets_aws_lc_rs_1.3_ecdsap384_chacha_client 50314509 50434505 119996 (0.24%) 0.58%
handshake_session_id_aws_lc_rs_1.3_ecdsap256_chacha_server 41812710 41738157 -74553 (-0.18%) 0.32%
handshake_session_id_aws_lc_rs_1.3_rsa_aes_client 50172559 50253463 80904 (0.16%) 0.73%
handshake_tickets_aws_lc_rs_1.3_ecdsap384_aes_server 43161669 43096220 -65449 (-0.15%) 0.35%
handshake_no_resume_aws_lc_rs_1.3_rsa_aes_server 11084608 11100384 15776 (0.14%) 0.74%
handshake_tickets_aws_lc_rs_1.3_ecdsap256_chacha_server 43171988 43111261 -60727 (-0.14%) 0.58%
handshake_tickets_aws_lc_rs_1.3_ecdsap384_chacha_server 43053117 43113294 60177 (0.14%) 0.30%
handshake_session_id_aws_lc_rs_1.3_ecdsap384_chacha_client 50131963 50183739 51776 (0.10%) 0.49%
handshake_session_id_aws_lc_rs_1.3_rsa_aes_server 41662170 41702859 40689 (0.10%) 0.43%
handshake_session_id_aws_lc_rs_1.3_ecdsap384_aes_client 50239389 50191241 -48148 (-0.10%) 0.43%
handshake_no_resume_aws_lc_rs_1.3_ecdsap384_aes_client 9022683 9015349 -7334 (-0.08%) 0.95%
handshake_session_id_aws_lc_rs_1.3_ecdsap384_chacha_server 41718141 41743761 25620 (0.06%) 0.30%
handshake_session_id_aws_lc_rs_1.3_ecdsap256_aes_client 50260779 50288239 27460 (0.05%) 0.45%
handshake_session_id_aws_lc_rs_1.3_ecdsap384_aes_server 41817649 41796795 -20854 (-0.05%) 0.44%
handshake_session_id_aws_lc_rs_1.3_ecdsap256_aes_server 41831229 41851671 20442 (0.05%) 0.26%
handshake_tickets_aws_lc_rs_1.3_rsa_aes_server 43005292 42984480 -20812 (-0.05%) 0.42%
handshake_tickets_aws_lc_rs_1.3_rsa_chacha_server 43001734 42982269 -19465 (-0.05%) 0.26%
handshake_tickets_aws_lc_rs_1.3_rsa_chacha_client 50440526 50421644 -18882 (-0.04%) 0.66%
handshake_no_resume_aws_lc_rs_1.3_ecdsap256_aes_server 1488541 1488172 -369 (-0.02%) 1.30%
handshake_session_id_aws_lc_rs_1.3_rsa_chacha_client 50151607 50162737 11130 (0.02%) 0.61%
handshake_no_resume_aws_lc_rs_1.3_ecdsap256_aes_client 3803525 3802682 -843 (-0.02%) 0.96%
handshake_no_resume_aws_lc_rs_1.2_rsa_aes_server 10427465 10425687 -1778 (-0.02%) 1.14%
handshake_no_resume_aws_lc_rs_1.3_ecdsap256_chacha_server 1490526 1490303 -223 (-0.01%) 5.26%
handshake_session_id_aws_lc_rs_1.3_rsa_chacha_server 41626499 41631922 5423 (0.01%) 0.38%
handshake_no_resume_aws_lc_rs_1.3_rsa_chacha_client 2634057 2633801 -256 (-0.01%) 1.57%
handshake_no_resume_aws_lc_rs_1.3_ecdsap384_chacha_server 2413770 2413567 -203 (-0.01%) 3.22%
transfer_no_resume_aws_lc_rs_1.2_rsa_aes_server 45965034 45967954 2920 (0.01%) 0.20%
handshake_no_resume_aws_lc_rs_1.3_ecdsap256_chacha_client 3805273 3805491 218 (0.01%) 3.92%
handshake_no_resume_ring_1.3_ecdsap256_chacha_client 3275414 3275277 -137 (-0.00%) 0.25%
handshake_no_resume_aws_lc_rs_1.2_rsa_aes_client 1686159 1686211 52 (0.00%) 0.20%
handshake_no_resume_ring_1.3_ecdsap256_aes_client 3273981 3274062 81 (0.00%) 0.20%
handshake_no_resume_ring_1.3_ecdsap256_chacha_server 1240096 1240107 11 (0.00%) 0.20%
handshake_tickets_aws_lc_rs_1.3_ecdsap256_aes_client 50426043 50425600 -443 (-0.00%) 0.55%
handshake_no_resume_aws_lc_rs_1.3_rsa_aes_client 2627142 2627154 12 (0.00%) 0.20%
handshake_tickets_aws_lc_rs_1.3_ecdsap256_aes_server 43155197 43155051 -146 (-0.00%) 0.34%
handshake_no_resume_ring_1.3_ecdsap256_aes_server 1238927 1238930 3 (0.00%) 0.20%
handshake_no_resume_ring_1.3_ecdsap384_chacha_server 7188828 7188844 16 (0.00%) 0.20%
handshake_no_resume_ring_1.3_ecdsap384_aes_server 7186892 7186883 -9 (-0.00%) 0.20%
transfer_no_resume_aws_lc_rs_1.3_ecdsap256_chacha_client 92473087 92473142 55 (0.00%) 0.20%
handshake_no_resume_ring_1.3_ecdsap384_chacha_client 34716644 34716664 20 (0.00%) 0.20%
handshake_no_resume_ring_1.3_ecdsap384_aes_client 34714948 34714938 -10 (-0.00%) 0.20%
transfer_no_resume_ring_1.3_ecdsap256_chacha_server 80166284 80166284 0 (0.00%) 0.20%
handshake_tickets_ring_1.3_rsa_aes_server 32156568 32156568 0 (0.00%) 0.20%
transfer_no_resume_1.2_no_crypto_client 116991149 116991149 0 (0.00%) 0.20%
transfer_no_resume_ring_1.3_ecdsap384_aes_server 45930667 45930667 0 (0.00%) 0.20%
handshake_tickets_1.2_no_crypto_client 1322710 1322710 0 (0.00%) 0.50%
handshake_no_resume_ring_1.2_rsa_aes_server 10928801 10928801 0 (0.00%) 0.20%
handshake_session_id_ring_1.3_rsa_chacha_server 31754003 31754003 0 (0.00%) 0.20%
handshake_no_resume_ring_1.2_rsa_aes_client 2175538 2175538 0 (0.00%) 0.20%
transfer_no_resume_aws_lc_rs_1.3_ecdsap384_chacha_client 92473034 92473034 0 (0.00%) 0.20%
handshake_no_resume_ring_1.3_rsa_chacha_client 2309487 2309487 0 (0.00%) 0.20%
handshake_session_id_ring_1.2_rsa_aes_server 3447279 3447279 0 (0.00%) 0.43%
handshake_session_id_ring_1.3_ecdsap384_chacha_server 31768055 31768055 0 (0.00%) 0.20%
transfer_no_resume_1.3_no_crypto_client 117031455 117031455 0 (0.00%) 0.20%
handshake_tickets_1.3_no_crypto_client 2446039 2446039 0 (0.00%) 0.60%
transfer_no_resume_ring_1.3_ecdsap256_aes_client 57907615 57907615 0 (0.00%) 0.20%
handshake_tickets_aws_lc_rs_1.2_rsa_aes_server 4978578 4978578 0 (0.00%) 0.37%
transfer_no_resume_ring_1.3_rsa_chacha_server 80166353 80166353 0 (0.00%) 0.20%
transfer_no_resume_ring_1.3_ecdsap384_aes_client 57907615 57907615 0 (0.00%) 0.20%
transfer_no_resume_aws_lc_rs_1.3_rsa_chacha_server 80197866 80197866 0 (0.00%) 0.20%
handshake_session_id_ring_1.3_ecdsap256_aes_server 31889116 31889116 0 (0.00%) 0.20%
handshake_tickets_ring_1.2_rsa_aes_client 3931841 3931841 0 (0.00%) 0.46%
transfer_no_resume_1.2_no_crypto_server 104838092 104838092 0 (0.00%) 0.20%
handshake_session_id_ring_1.3_rsa_aes_server 31876193 31876193 0 (0.00%) 0.20%
handshake_session_id_ring_1.3_rsa_aes_client 30757347 30757347 0 (0.00%) 0.20%
handshake_session_id_ring_1.3_rsa_chacha_client 30665667 30665667 0 (0.00%) 0.20%
handshake_tickets_ring_1.3_ecdsap256_chacha_server 32062780 32062780 0 (0.00%) 0.20%
handshake_tickets_ring_1.3_rsa_chacha_client 30783065 30783065 0 (0.00%) 0.20%
handshake_session_id_ring_1.2_rsa_aes_client 3538734 3538734 0 (0.00%) 0.46%
handshake_tickets_ring_1.3_ecdsap384_chacha_client 30742316 30742316 0 (0.00%) 0.20%
handshake_no_resume_aws_lc_rs_1.3_ecdsap384_aes_server 2410512 2410512 0 (0.00%) 0.20%
handshake_tickets_ring_1.3_rsa_chacha_server 32053608 32053608 0 (0.00%) 0.20%
handshake_session_id_1.2_no_crypto_client 1234721 1234721 0 (0.00%) 0.49%
transfer_no_resume_ring_1.2_rsa_aes_server 45853499 45853499 0 (0.00%) 0.20%
transfer_no_resume_aws_lc_rs_1.3_ecdsap384_aes_server 46010077 46010077 0 (0.00%) 0.20%
transfer_no_resume_aws_lc_rs_1.3_ecdsap256_chacha_server 80191875 80191875 0 (0.00%) 0.20%
handshake_tickets_1.3_no_crypto_server 2261330 2261330 0 (0.00%) 0.90%
handshake_tickets_ring_1.3_ecdsap384_chacha_server 32066083 32066083 0 (0.00%) 0.20%
transfer_no_resume_aws_lc_rs_1.3_rsa_aes_client 58024794 58024794 0 (0.00%) 0.20%
handshake_session_id_aws_lc_rs_1.2_rsa_aes_server 3872439 3872439 0 (0.00%) 0.95%
transfer_no_resume_ring_1.3_ecdsap256_aes_server 45930764 45930764 0 (0.00%) 0.20%
handshake_no_resume_ring_1.3_rsa_chacha_server 11091952 11091952 0 (0.00%) 0.20%
transfer_no_resume_ring_1.3_rsa_aes_client 57930078 57930078 0 (0.00%) 0.20%
handshake_no_resume_ring_1.3_rsa_aes_client 2303833 2303833 0 (0.00%) 0.20%
transfer_no_resume_aws_lc_rs_1.3_rsa_aes_server 46020456 46020456 0 (0.00%) 0.20%
handshake_no_resume_1.2_no_crypto_server 43344 43344 0 (0.00%) 0.39%
handshake_tickets_ring_1.2_rsa_aes_server 4023370 4023370 0 (0.00%) 0.20%
handshake_session_id_1.3_no_crypto_client 2425736 2425736 0 (0.00%) 0.27%
transfer_no_resume_aws_lc_rs_1.2_rsa_aes_client 57921949 57921949 0 (0.00%) 0.20%
transfer_no_resume_ring_1.3_ecdsap256_chacha_client 92433695 92433695 0 (0.00%) 0.20%
handshake_tickets_ring_1.3_rsa_aes_client 30855305 30855305 0 (0.00%) 0.20%
handshake_tickets_ring_1.3_ecdsap384_aes_client 30814556 30814556 0 (0.00%) 0.20%
handshake_no_resume_1.2_no_crypto_client 61717 61717 0 (0.00%) 1.27%
transfer_no_resume_ring_1.3_rsa_chacha_client 92456158 92456158 0 (0.00%) 0.20%
handshake_session_id_ring_1.3_ecdsap384_aes_server 31890245 31890245 0 (0.00%) 0.20%
transfer_no_resume_aws_lc_rs_1.3_rsa_chacha_client 92484314 92484314 0 (0.00%) 0.20%
handshake_session_id_1.2_no_crypto_server 1155666 1155666 0 (0.00%) 1.67%
handshake_session_id_ring_1.3_ecdsap384_aes_client 30743721 30743721 0 (0.00%) 0.20%
handshake_session_id_aws_lc_rs_1.2_rsa_aes_client 3965455 3965455 0 (0.00%) 0.20%
handshake_tickets_1.2_no_crypto_server 1294918 1294918 0 (0.00%) 1.40%
handshake_tickets_ring_1.3_ecdsap256_aes_client 30816787 30816787 0 (0.00%) 0.20%
handshake_session_id_ring_1.3_ecdsap256_chacha_client 30647193 30647193 0 (0.00%) 0.20%
transfer_no_resume_ring_1.3_rsa_aes_server 45931473 45931473 0 (0.00%) 0.20%
transfer_no_resume_aws_lc_rs_1.3_ecdsap256_aes_server 46011395 46011395 0 (0.00%) 0.20%
transfer_no_resume_aws_lc_rs_1.3_ecdsap256_aes_client 58012927 58012927 0 (0.00%) 0.20%
transfer_no_resume_aws_lc_rs_1.3_ecdsap384_chacha_server 80191837 80191837 0 (0.00%) 0.20%
handshake_no_resume_1.3_no_crypto_server 64916 64916 0 (0.00%) 1.03%
transfer_no_resume_aws_lc_rs_1.3_ecdsap384_aes_client 58012874 58012874 0 (0.00%) 0.20%
transfer_no_resume_ring_1.3_ecdsap384_chacha_server 80166187 80166187 0 (0.00%) 0.20%
handshake_no_resume_1.3_no_crypto_client 73767 73767 0 (0.00%) 0.78%
handshake_tickets_ring_1.3_ecdsap384_aes_server 32169043 32169043 0 (0.00%) 0.20%
transfer_no_resume_ring_1.2_rsa_aes_client 57766498 57766498 0 (0.00%) 0.20%
handshake_no_resume_ring_1.3_rsa_aes_server 11086199 11086199 0 (0.00%) 0.20%
handshake_tickets_ring_1.3_ecdsap256_aes_server 32165740 32165740 0 (0.00%) 0.20%
transfer_no_resume_1.3_no_crypto_server 104877400 104877400 0 (0.00%) 0.20%
handshake_session_id_ring_1.3_ecdsap256_chacha_server 31766926 31766926 0 (0.00%) 0.20%
handshake_session_id_1.3_no_crypto_server 2313576 2313576 0 (0.00%) 0.82%
handshake_tickets_aws_lc_rs_1.2_rsa_aes_client 4360197 4360197 0 (0.00%) 0.20%
transfer_no_resume_ring_1.3_ecdsap384_chacha_client 92433695 92433695 0 (0.00%) 0.20%
handshake_session_id_ring_1.3_ecdsap256_aes_client 30738903 30738903 0 (0.00%) 0.20%
handshake_session_id_ring_1.3_ecdsap384_chacha_client 30652041 30652041 0 (0.00%) 0.20%
handshake_tickets_ring_1.3_ecdsap256_chacha_client 30744517 30744517 0 (0.00%) 0.20%

Wall-time

Significant differences

There are no significant wall-time differences

Other differences

Click to expand
Scenario Baseline Candidate Diff Threshold
handshake_no_resume_1.2_no_crypto 78.29 µs 78.83 µs 0.54 µs (0.69%) 6.18%
transfer_no_resume_ring_1.3_rsa_aes 6.16 ms 6.20 ms 0.04 ms (0.67%) 3.72%
transfer_no_resume_aws_lc_rs_1.3_ecdsap256_aes 4.85 ms 4.88 ms 0.03 ms (0.64%) 4.52%
transfer_no_resume_ring_1.3_ecdsap256_aes 5.68 ms 5.71 ms 0.04 ms (0.62%) 4.63%
transfer_no_resume_aws_lc_rs_1.3_ecdsap384_aes 5.54 ms 5.57 ms 0.03 ms (0.60%) 4.19%
handshake_tickets_1.3_no_crypto 722.27 µs 718.16 µs -4.11 µs (-0.57%) 7.45%
handshake_session_id_1.2_no_crypto 388.63 µs 386.60 µs -2.03 µs (-0.52%) 8.59%
transfer_no_resume_aws_lc_rs_1.3_rsa_aes 5.48 ms 5.51 ms 0.03 ms (0.50%) 4.27%
handshake_tickets_1.2_no_crypto 420.47 µs 418.41 µs -2.06 µs (-0.49%) 9.53%
handshake_tickets_aws_lc_rs_1.2_rsa_aes 1.81 ms 1.80 ms -0.01 ms (-0.47%) 2.85%
handshake_session_id_aws_lc_rs_1.2_rsa_aes 1.65 ms 1.64 ms -0.01 ms (-0.43%) 3.02%
handshake_session_id_1.3_no_crypto 747.06 µs 744.33 µs -2.73 µs (-0.36%) 9.62%
transfer_no_resume_ring_1.2_rsa_aes 6.07 ms 6.09 ms 0.02 ms (0.36%) 3.12%
transfer_no_resume_ring_1.3_ecdsap384_aes 8.77 ms 8.80 ms 0.03 ms (0.30%) 2.28%
transfer_no_resume_ring_1.3_ecdsap256_chacha 13.24 ms 13.27 ms 0.04 ms (0.27%) 1.65%
transfer_no_resume_aws_lc_rs_1.2_rsa_aes 5.32 ms 5.34 ms 0.01 ms (0.27%) 3.43%
handshake_no_resume_aws_lc_rs_1.3_ecdsap256_aes 544.78 µs 546.22 µs 1.44 µs (0.26%) 2.56%
handshake_no_resume_ring_1.3_ecdsap256_chacha 462.20 µs 463.40 µs 1.20 µs (0.26%) 1.47%
handshake_tickets_ring_1.2_rsa_aes 1.57 ms 1.56 ms -0.00 ms (-0.25%) 3.13%
transfer_no_resume_ring_1.3_rsa_chacha 13.73 ms 13.76 ms 0.03 ms (0.24%) 1.61%
handshake_tickets_aws_lc_rs_1.3_rsa_aes 8.31 ms 8.33 ms 0.02 ms (0.19%) 1.88%
handshake_tickets_aws_lc_rs_1.3_ecdsap256_aes 7.66 ms 7.67 ms 0.01 ms (0.19%) 1.82%
transfer_no_resume_ring_1.3_ecdsap384_chacha 16.33 ms 16.36 ms 0.03 ms (0.18%) 1.07%
transfer_no_resume_1.3_no_crypto 12.19 ms 12.21 ms 0.02 ms (0.18%) 2.05%
transfer_no_resume_aws_lc_rs_1.3_rsa_chacha 13.97 ms 13.99 ms 0.02 ms (0.18%) 1.79%
handshake_no_resume_ring_1.3_ecdsap384_chacha 3.57 ms 3.56 ms -0.01 ms (-0.18%) 1.00%
transfer_no_resume_aws_lc_rs_1.3_ecdsap384_chacha 14.03 ms 14.05 ms 0.02 ms (0.17%) 1.35%
handshake_no_resume_aws_lc_rs_1.3_ecdsap256_chacha 544.78 µs 545.65 µs 0.88 µs (0.16%) 3.06%
handshake_no_resume_ring_1.3_ecdsap384_aes 3.57 ms 3.56 ms -0.01 ms (-0.15%) 1.00%
transfer_no_resume_aws_lc_rs_1.3_ecdsap256_chacha 13.34 ms 13.36 ms 0.02 ms (0.15%) 1.54%
handshake_session_id_ring_1.3_ecdsap384_chacha 8.63 ms 8.61 ms -0.01 ms (-0.15%) 1.21%
handshake_session_id_ring_1.3_rsa_chacha 6.02 ms 6.01 ms -0.01 ms (-0.14%) 1.77%
handshake_tickets_ring_1.3_ecdsap384_chacha 8.69 ms 8.68 ms -0.01 ms (-0.14%) 1.00%
handshake_tickets_aws_lc_rs_1.3_ecdsap256_chacha 7.62 ms 7.63 ms 0.01 ms (0.13%) 1.01%
handshake_session_id_ring_1.3_rsa_aes 6.06 ms 6.05 ms -0.01 ms (-0.13%) 1.10%
handshake_no_resume_1.3_no_crypto 87.59 µs 87.48 µs -0.11 µs (-0.12%) 7.23%
handshake_tickets_aws_lc_rs_1.3_ecdsap384_aes 8.35 ms 8.36 ms 0.01 ms (0.12%) 1.96%
handshake_no_resume_aws_lc_rs_1.3_ecdsap384_chacha 1.23 ms 1.23 ms 0.00 ms (0.12%) 1.00%
handshake_no_resume_ring_1.3_ecdsap256_aes 464.49 µs 465.01 µs 0.53 µs (0.11%) 2.04%
handshake_tickets_aws_lc_rs_1.3_ecdsap384_chacha 8.31 ms 8.32 ms 0.01 ms (0.11%) 1.28%
handshake_tickets_ring_1.3_rsa_chacha 6.08 ms 6.08 ms -0.01 ms (-0.10%) 1.48%
handshake_tickets_ring_1.3_ecdsap384_aes 8.72 ms 8.71 ms -0.01 ms (-0.10%) 1.02%
handshake_tickets_ring_1.3_rsa_aes 6.12 ms 6.11 ms -0.01 ms (-0.09%) 2.30%
handshake_session_id_ring_1.3_ecdsap384_aes 8.65 ms 8.65 ms -0.01 ms (-0.09%) 1.16%
handshake_session_id_ring_1.2_rsa_aes 1.47 ms 1.47 ms -0.00 ms (-0.09%) 3.50%
handshake_session_id_aws_lc_rs_1.3_ecdsap384_chacha 8.10 ms 8.11 ms 0.01 ms (0.08%) 1.28%
handshake_tickets_ring_1.3_ecdsap256_aes 5.62 ms 5.61 ms -0.00 ms (-0.08%) 2.14%
handshake_no_resume_aws_lc_rs_1.2_rsa_aes 1.05 ms 1.05 ms 0.00 ms (0.07%) 1.12%
handshake_no_resume_ring_1.2_rsa_aes 945.66 µs 946.35 µs 0.68 µs (0.07%) 1.00%
handshake_session_id_aws_lc_rs_1.3_rsa_aes 8.13 ms 8.13 ms 0.01 ms (0.07%) 2.14%
handshake_tickets_aws_lc_rs_1.3_rsa_chacha 8.28 ms 8.29 ms 0.01 ms (0.07%) 1.28%
handshake_session_id_aws_lc_rs_1.3_ecdsap384_aes 8.15 ms 8.15 ms 0.00 ms (0.06%) 2.14%
handshake_session_id_aws_lc_rs_1.3_rsa_chacha 8.09 ms 8.09 ms 0.00 ms (0.04%) 1.44%
transfer_no_resume_1.2_no_crypto 12.17 ms 12.17 ms 0.00 ms (0.04%) 1.99%
handshake_no_resume_aws_lc_rs_1.3_ecdsap384_aes 1.23 ms 1.23 ms 0.00 ms (0.03%) 1.00%
handshake_session_id_ring_1.3_ecdsap256_aes 5.55 ms 5.55 ms -0.00 ms (-0.02%) 1.53%
handshake_tickets_ring_1.3_ecdsap256_chacha 5.58 ms 5.58 ms 0.00 ms (0.02%) 1.82%
handshake_session_id_aws_lc_rs_1.3_ecdsap256_aes 7.47 ms 7.47 ms 0.00 ms (0.02%) 2.21%
handshake_no_resume_ring_1.3_rsa_aes 953.60 µs 953.79 µs 0.19 µs (0.02%) 1.00%
handshake_session_id_ring_1.3_ecdsap256_chacha 5.52 ms 5.52 ms 0.00 ms (0.02%) 1.92%
handshake_no_resume_aws_lc_rs_1.3_rsa_chacha 1.18 ms 1.18 ms 0.00 ms (0.02%) 1.42%
handshake_no_resume_ring_1.3_rsa_chacha 956.09 µs 955.94 µs -0.15 µs (-0.02%) 1.00%
handshake_no_resume_aws_lc_rs_1.3_rsa_aes 1.18 ms 1.18 ms 0.00 ms (0.02%) 1.00%
handshake_session_id_aws_lc_rs_1.3_ecdsap256_chacha 7.43 ms 7.43 ms 0.00 ms (0.00%) 1.77%

Memory usage

Key:

  • ∑: sum usage for entire benchmark run
  • 🔝: peak usage
  • B: bytes
  • a: allocations

Significant differences

There are no significant memory usage differences

Additional information

Historical results

Checkout details:

@codecov

codecov Bot commented Jan 5, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.92%. Comparing base (4e1db94) to head (f411d2f).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files 
@@           Coverage Diff           @@
##             main    #2827   +/-   ##
=======================================
  Coverage   93.92%   93.92%           
=======================================
  Files          99       99           
  Lines       21580    21597   +17     
  Branches      642      642           
=======================================
+ Hits        20269    20286   +17     
  Misses       1168     1168           
  Partials      143      143

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@djc

djc commented Jan 5, 2026 •
edited
Loading

Copy link
Copy Markdown
Member

Do you want to backport this to 0.23?

@ctz
ctz added this pull request to the merge queue Jan 5, 2026
Merged via the queue into main with commit 480bb2f Jan 5, 2026
40 checks passed
@ctz
ctz deleted the jbp-p384-sha512-certs branch January 5, 2026 16:27
cratelyn added a commit to linkerd/linkerd2-proxy that referenced this pull request Jan 21, 2026
@cratelyn
chore: add P256+SHA512 and P384+SHA512 signatures
5e57b2b 
rustls/rustls#2827 introduced additional
algorithms to the list of supported signatures in our cryptography
provider.

this commit adds these to the `SUPPORTED_SIG_ALGS`, introduced in
#3883, which is effectively a local copy of this
internal static variable.

Signed-off-by: katelyn martin <[email protected]>
@cratelyn cratelyn mentioned this pull request Jan 21, 2026
Merged
cratelyn added a commit to linkerd/linkerd2-proxy that referenced this pull request Jan 22, 2026
@cratelyn
chore: update rustls dependencies (#4383)
90ff0bc 
* chore: update rustls from 0.23.35 to 0.23.36

Signed-off-by: katelyn martin <[email protected]>

* chore: add P256+SHA512 and P384+SHA512 signatures

rustls/rustls#2827 introduced additional
algorithms to the list of supported signatures in our cryptography
provider.

this commit adds these to the `SUPPORTED_SIG_ALGS`, introduced in
#3883, which is effectively a local copy of this
internal static variable.

Signed-off-by: katelyn martin <[email protected]>

* chore: update rustls-webpki from 0.103.8 to 0.103.9

Signed-off-by: katelyn martin <[email protected]>

* chore: update rustls-pki-types from 0.13.1 to 0.14.0

Signed-off-by: katelyn martin <[email protected]>

---------

Signed-off-by: katelyn martin <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@djc djc djc approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

UnsupportedSignatureAlgorithmForPublicKeyContext when connecting to wiki.dn42

2 participants

@ctz @djc