I wonder that you're forgetting that this is an entire VM. Including all the other bits necessary to function, such as a networking stack, web server, etc. it's

I wonder that you're forgetting that this is an entire VM. Including all the other bits necessary to function, such as a networking stack, web server, etc. it's not really fair to compare it with just OpenSSL this way. It should really be compared with a full Linux stack+OpenSSL (which is at least one order of magnitude larger, and probably more like two). Having said that, yes there are ways to make it even smaller. We're working on getting the pieces right first.