Other Directory Sites: SeekWonder | Directory Owners Forum
The following archive was created by hippie-mail 7.98617-22 on Fri Aug 21 1998 - 17:18:21 ADT
Eric Young (eay@cryptsoft.com)
Fri, 5 Jun 1998 17:10:05 +1000 (EST)
On Thu, 4 Jun 1998, Adam Shostack wrote:
> | Algorithms run much faster on the 7711 processor than they do in
> | software. For example, the 7711 performs Triple-DES encrypt/decrypt
...
> So is the card updatable to deal with the attacks that Bruce S
> and Mudge found recently, or is everyone with hardware acceleration
> cursed to live with these bugs?
...
> 350 is twice as fast.) Now, for PK operations, a nice blue led totin'
> Ncipher kind of box that gets me a speedup of 30-50 is worthwhile,
> especially as it does RSA, not some particular protocol.
If you are only after hardware to do things faster, then for RSA, your best
bet it probably just buy an Alpha based box.
A Tokens real value is keeping the private key private.
RSA-512 RSA-1024 RSA-2048
sign verify sign verify sign verify
[1] 85.0 9.0 540.0 825.0(?)
[2] 1.8 0.2 8.1 0.5 48.9 1.5
[3] 3.3 (key size not specified, could be 512 ?)
[4] 3.4 0.3 13.9 0.8 81.5 2.6
[5] 53.5
[6] 14.2 55.0
(times in mili-seconds)
[1] http://www.ibm.com/security/cryptocards/
[2] SSLeay, linux, DEC Alpha 21164 533mhz
[3] www.ncipher.com nCipher nFast
[4] SSLeay, IRIX 6.4, MIPS R10000 180mhz
[5] isg.rainbow.com CryptoSwift
[6] www.chrysalis-its.com Luna2
Now the key thing to note is that for the confirmed values, the 2 realy fast
numbers are for software running on popular CPUs. I'm not sure if the DEC
21164 is considered a comodity CPU yet :-), but systems can be bought for
Pentium2 type prices.
Even for symetric ciphers, The above mentioned alpha box can do RC4 at
24Mbytes/sec, single DES at 6.8Mbytes/sec and 3DES at 2.6Mbytes/sec.
eric
PS I know that boards like the nCipher one has multiple CPUs so
a sequention timing test does not give a true indication of their
value in a heavily loaded server that has better things to do
while the RSA operations occure in parallel.
The following archive was created by hippie-mail 7.98617-22 on Fri Aug 21 1998 - 17:18:21 ADT