# Alternative ssl

**URL:** <https://www.ruby-forum.com/t/alternative-ssl/217077>\
**Category:** NGINX\
**Created:** [February 21, 2012, 7:45am UTC](https://www.ruby-forum.com/t/alternative-ssl/217077 "2012-02-21T07:45:01Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![dubstep](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/d/cdc98d/32.png) [@dubstep](https://www.ruby-forum.com/u/dubstep)\
**Post date:** [February 21, 2012, 7:45am UTC](https://www.ruby-forum.com/t/alternative-ssl/217077/1 "2012-02-21T07:45:01Z")

</div>

Hi,

NGINX dev team has been working with CyaSSL in regard to integrating  
this library as an alternative SSL engine:

> **[CyaSSL working with Nginx – wolfSSL](https://www.wolfssl.com/cyassl-working-nginx/)**
>
> Hi!  We have been asked a number of times about CyaSSL integration with the Nginx web server.  If you are not familiar with Nginx, it is a high performance, high concurrency web server that is becoming extremely popular these days.  You can learn...

What would be opinions here in regards to what kind of an SSL is good to  
have with nginx? And what would be the reasons for that (short)?

Many thanks!

---

<div class="post-metadata">

**Author:** ![chillexistence](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/c/ee7513/32.png) [@chillexistence](https://www.ruby-forum.com/u/chillexistence)\
**Post date:** [February 21, 2012, 12:49pm UTC](https://www.ruby-forum.com/t/alternative-ssl/217077/2 "2012-02-21T12:49:22Z")

</div>

Are there any (recent) benchmarks vs OpenSSL? or features not  
supported by CyaSSL but supported in OpenSSL?

Its all about performance, cpu usage. I have lots of SSL connections  
coming through so any improvements with speed and decrease in CPU  
usage I’m for it.

---

<div class="post-metadata">

**Author:** ![chillexistence](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/c/ee7513/32.png) [@chillexistence](https://www.ruby-forum.com/u/chillexistence)\
**Post date:** [February 21, 2012, 4:23pm UTC](https://www.ruby-forum.com/t/alternative-ssl/217077/3 "2012-02-21T16:23:07Z")

</div>

Ryan,

There’s a preliminary work done so far, no benchmarks. CyaSSL is  
primarily about reducing memory per connection several times.

–

---

<div class="post-metadata">

**Author:** ![chillexistence](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/c/ee7513/32.png) [@chillexistence](https://www.ruby-forum.com/u/chillexistence)\
**Post date:** [February 21, 2012, 5:32pm UTC](https://www.ruby-forum.com/t/alternative-ssl/217077/4 "2012-02-21T17:32:39Z")

</div>

On 02/21/2012 12:48 PM, Ryan B. wrote:

> Are there any (recent) benchmarks vs OpenSSL? or features not  
> supported by CyaSSL but supported in OpenSSL?
> 
> Its all about performance, cpu usage. I have lots of SSL connections  
> coming through so any improvements with speed and decrease in CPU  
> usage I’m for it.

Cyassl has cleaner implementation and api. Maintainers also claim lower  
memory footprint, which is considerable argument

> **[wolfSSL Embedded SSL/TLS Library | Products – wolfSSL](https://www.wolfssl.com/products/wolfssl/)**
>
> PRODUCTS
> 
> 
> wolfSSL Embedded SSL/TLS Library
> 
> 
> The wolfSSL embedded SSL library is a lightweight SSL/TLS library written in ANSI C and targeted for embedded, RTOS, and resource-constrained environments - primarily because of its small size, speed,...

> **[Comparison of TLS implementations](https://en.wikipedia.org/wiki/Comparison_of_TLS_Implementations)**
>
> The Transport Layer Security (TLS) protocol provides the ability to secure communications across or inside networks. This comparison of TLS implementations compares several of the most notable libraries. There are several TLS implementations which are free software and open source.
> All comparison categories use the stable version of each implementation listed in the overview section. The comparison is limited to features that directly relate to the TLS protocol.
> SSL-J 7.1.1 (May 19, 2023; 15 ...

Brane

---

<div class="post-metadata">

**Author:** ![chillexistence](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/c/ee7513/32.png) [@chillexistence](https://www.ruby-forum.com/u/chillexistence)\
**Post date:** [October 29, 2013, 5:57pm UTC](https://www.ruby-forum.com/t/alternative-ssl/217077/5 "2013-10-29T17:57:28Z")

</div>

Was there ever any progress on this topic? Personally I think it would  
be  
very interesting to see nginx supporting CyaSSL with the NTRU algorithm  
for  
high performance websites. To be honest, I’d love to run some benchmarks  
on  
my own on this.

Posted at Nginx Forum:

> **[Re: alternative ssl](https://forum.nginx.org/read.php?2,222763,244238#msg-244238)**
>
> Hi, NGINX dev team has been working with CyaSSL in regard to integrating this library as an alternative SSL engine: http://www.yassl.com/yaSSL/Blog/Entries/2012/2/20\_CyaSSL\_working\_with\_Nginx.html?utm\_source=twitterfeed&utm\_medium=twitter What...
