Let perftools to also bench OpenSSL forks.

This change adjusts existing perftools so they cne be built
by 3rd party SSL libraries (a.k.a. OpenSSL forks). Currently
those tools can be used to bench OpenSSL forks:
   randbytes, rsasign, handshake, sslnew, x509storeissuer.
   evp_setpeer, writeread

The change also adds bench_config_forks.sh which installs
forks and builds perftools. And bench_run_forks.sh which
runs tests and plots results.

Fixes openssl/project#1845

Author: Sashan

bench-scripts/README.md

@@ -84,6 +84,21 @@ all siege tests connect to HA-proxy via, which then establishes SSL connection
 towards httpterm [10] server. To collect performance data The siege client
 executes requests which fetch 1k of data from httpterm server.
 
+## OpenSSL Forks
+
+This test builds OpenSSL forks and uses perftools to benchmark those forks.
+The list of perftools which can run with forks:
+    randbytes
+    rsasign
+    handshake
+    sslnew
+    x509storeissuer
+    evp_setpeer (only for some keys)
+
+The bench_config_forks.sh script builds and install libraries. It also builds
+perftools for each OpenSSL fork library. The script also builds openssl-master.
+The bench_run_forks.sh runs tests and plots results as .png files.
+
 ## Build requirements
 
 Requirements for ubuntu are the following:

bench-scripts/bench_config_forks.sh

@@ -0,0 +1,88 @@
+#!/usr/bin/env ksh
+#
+# Copyright 2026 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the Apache License 2.0 (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+#
+
+set -x
+
+. ./common_util.sh
+
+INSTALL_ROOT=${BENCH_INSTALL_ROOT:-"/tmp/bench.binaries"}
+RESULT_DIR=${BENCH_RESULTS:-"${INSTALL_ROOT}/results"}
+WORKSPACE_ROOT=${BENCH_WORKSPACE_ROOT:-"/tmp/bench.workspace"}
+MAKE_OPTS=${BENCH_MAKE_OPTS}
+CFLAGS_SAVE=${CFLAGS}
+
+WOLFSSL_VERSION=5.8.2
+LIBRESSL_VERSION=4.2.1
+OPENSSL_VERSION=master
+
+function build_perftools {
+    #
+    # when testing changes for C-code or CMakeFileList.txt
+    # you must change link to repository, so script pulls
+    # modified sources
+    #
+    typeset PERFTOOLS='https://github.com/openssl/perftools'
+
+    cd ${WORKSPACE_ROOT} || exit 1
+    #
+    # you may also need to change clone command to
+    # checkout correct branch.
+    #
+    git clone ${PERFTOOLS} || exit 1
+    cd perftools/source || exit 1
+
+    cmake -S ${WORKSPACE_ROOT}/perftools/source \
+        -B ${INSTALL_ROOT}/build.openssl-${OPENSSL_VERSION} \
+        -DOPENSSL_CONFIG_MODE=1 \
+        -DCMAKE_PREFIX_PATH=${INSTALL_ROOT}/openssl-${OPENSSL_VERSION} \
+        -DCMAKE_PREFIX_PATH=${INSTALL_ROOT}/openssl-${OPENSSL_VERSION} || exit 1
+    cmake --build ${INSTALL_ROOT}/build.openssl-${OPENSSL_VERSION} || exit 1
+
+    cmake -S ${WORKSPACE_ROOT}/perftools/source \
+        -B ${INSTALL_ROOT}/build.wolfssl-${WOLFSSL_VERSION} \
+        -DWITH_OPENSSL_FORK=1 \
+        -DCMAKE_PREFIX_PATH=${INSTALL_ROOT}/wolfssl-${WOLFSSL_VERSION} || exit 1
+    cmake --build ${INSTALL_ROOT}/build.wolfssl-${WOLFSSL_VERSION} || exit 1
+
+    cmake -S ${WORKSPACE_ROOT}/perftools/source \
+        -B ${INSTALL_ROOT}/build.libressl-${LIBRESSL_VERSION} \
+        -DWITH_OPENSSL_FORK=1 \
+        -DCMAKE_PREFIX_PATH=${INSTALL_ROOT}/libressl-${LIBRESSL_VERSION} || exit 1
+    cmake --build ${INSTALL_ROOT}/build.libressl-${LIBRESSL_VERSION} || exit 1
+
+    cmake -S . -B $BENCH_INSTALL_ROOT/build.boringssl/ \
+        -DCMAKE_PREFIX_PATH=$BENCH_INSTALL_ROOT/boringssl \
+        -DWITH_OPENSSL_FORK=1 || exit 1
+    cmake --build ${INSTALL_ROOT}/build.boringssl || exit 1
+
+    cmake -S . -B $BENCH_INSTALL_ROOT/build.aws-lc/ \
+        -DCMAKE_PREFIX_PATH=$BENCH_INSTALL_ROOT/aws-lc \
+        -DWITH_OPENSSL_FORK=1 || exit 1
+    cmake --build ${INSTALL_ROOT}/build.aws-lc || exit 1
+}
+
+install_openssl ${OPENSSL_VERSION}
+
+#
+# enable WolfSSL's compatibility layer with OpenSSL.
+# another option is to use ./configure --enable-opensslextra
+# see: https://www.wolfssl.com/documentation/manuals/wolfssl/chapter13.html
+#
+CFLAGS="${CFLAGS} -DOPENSSL_EXTRA -DOPENSSL_ALL"
+install_wolfssl ${WOLFSSL_VERSION}
+CFLAGS=${CFLAGS_SAVE}
+
+install_libressl ${LIBRESSL_VERSION}
+
+install_boringssl
+
+install_aws_lc
+
+build_perftools