Rust-Written Rustls Now Reportedly Outperforming OpenSSL & BoringSSL

[phoronix]

Phoronix: Rust-Written Rustls Now Reportedly Outperforming OpenSSL & BoringSSL

Rustls was initially talked up as a modern TLS library written in the Rust programming language for its memory safety guarantees. But now besides the talked up advantages due to being written in Rust, it has reached the point of reportedly being faster than both OpenSSL and BoringSSL...

https://www.phoronix.com/news/Rustls-Faster-Than-OpenSSL

[access]

Nice!

[Errinwright]

Predictably. Its rare to see a project do worse being rewritten in Rust.

[AndiK]

Check out rustl's dependencies, its doesn't rust in its core.

[V1tol]

Benchmark details say that rustls used the aws-lc as a crypto backend which is itself written in C++. So it is not as amazing as it seems. I would like to see rustls with ring backend benchmarks instead.

[NobodyXu]

Benchmark details say that rustls used the aws-lc as a crypto backend which is itself written in C++. So it is not as amazing as it seems. I would like to see rustls with ring backend benchmarks instead.

ring also uses a perl-generated C code for some code, IIRC because the perl generator is taken from wolfSSL and guaranteed to be correct and compliant.

[kpedersen]

Is a 3044 lines long dependency file acceptable? That alone makes me question its ability to provide security.

And of course it also pulls in OpenSSL as a dependency too. Nice!

[access]

That's the lock file. These are the deps: https://github.com/rustls/rustls/blob/main/Cargo.toml -> https://github.com/rustls/rustls/blo...tls/Cargo.toml etc

OpenSSL is for the test suite.

[mdedetrich]

That's the lock file. These are the deps: https://github.com/rustls/rustls/blob/main/Cargo.toml -> https://github.com/rustls/rustls/blo...tls/Cargo.toml etc

OpenSSL is for the test suite.

Your giving too much faith to a known troll

[stiiixy]

Predictably. Its rare to see a project do worse being rewritten in Rust.

Is it Rust, or is it doing away with legacy and utilising modern coding practices?

After reading more posts, it seems it could be more unRust reason than stated. See how it pans out. Hooeyfully no game changing security holes form, reducing the overall performance.