Add noescape and nocallback directive to EVP_PKEY_derive

cgo_go122.go

@@ -0,0 +1,13 @@
+//go:build go1.22 && !cmd_go_bootstrap
+
+package openssl
+
+/*
+// The following noescape and nocallback directives are used to
+// prevent the Go compiler from allocating function parameters on the
+// heap. This is just a performance optimization. Only add those
+// functions that are known to allocate.
+#cgo noescape go_openssl_EVP_PKEY_derive
+#cgo nocallback go_openssl_EVP_PKEY_derive
+*/
+import "C"

ecdh_test.go

@@ -146,3 +146,28 @@ func hexDecode(t *testing.T, s string) []byte {
 	}
 	return b
 }
+
+func BenchmarkECDH(b *testing.B) {
+	const curve = "P-256"
+	aliceKey, _, err := openssl.GenerateKeyECDH(curve)
+	if err != nil {
+		b.Fatal(err)
+	}
+	bobKey, _, err := openssl.GenerateKeyECDH(curve)
+	if err != nil {
+		b.Fatal(err)
+	}
+
+	alicePubKey, err := aliceKey.PublicKey()
+	if err != nil {
+		b.Fatal(err)
+	}
+	b.ResetTimer()
+	b.ReportAllocs()
+	for i := 0; i < b.N; i++ {
+		_, err := openssl.ECDH(bobKey, alicePubKey)
+		if err != nil {
+			b.Fatal(err)
+		}
+	}
+}