Can we introduce back cipher pipelining to help improve performance?
Yi Ouyang Sun 30 Aug 2026 7:22AMPublicSeen by 40We are seeing high CPU usage when sending large workload. Wondering if we can have cipher pipelining feature introduced back?
Matt CaswellMon 7 Sep 2026 9:38AM
Note that new EVP layer API functions for performing cipher pipelining with providers that support it were added in OpenSSL 3.5. So, if all you care about is libcrypto and you have a suitable provider (don't know if there are any) - then you already have all the support you need.
There is no current support in libssl to use such pipelining capable ciphers - although the underlying code to support pipelining with ENGINEs is still there (even though ENGINEs themselves no longer exist). So the work involved in supporting cipher pipelining in libssl is to convert the already existing support to use the new APIs.
Jeff Johnson ·Mon 31 Aug 2026 1:29PM
@Yi Ouyang Could you fill out the attached Request for Guidance/Feature form? We are trying to formalize the approach a bit more for OpenSSL. This form helps with that plus gives the rest of the community the opportunity to discuss as well! All good things!