AnsweredAssumed Answered

Slow performance of BSAFE MES on Power Linux

Question asked by Ali Razib Employee on Sep 13, 2016

We have been using BSAFE MES 4.1.4 for building CST lockbox libraries on Power Linux.

 

Now, we are seeing considerable performance issues compared to regular Linux. The lockbox operations (create, open, access) take more than 2 seconds while on regular Linux it is below 0.3 sec. I did some investigation, and found out that the performance is being affected during encryption and decryption routines.

 

To prove this, CST team suggested me to build r_dgst and compare its performance on different platforms. So I built r_dgst for Power Linux with MES 4.1.4 and for regular Linux with MES 4.0.5, and the performance is indeed noticeably slow on pLinux – 0.10 sec vs 2.66 sec.

 

Could you let us know if there’s another MES version that could be used in our case, or should we wait till this is fixed in a future release?

 

 

==============

 

REGULAR LINUX WITH BSAFE 4.0.5:

 

# time ./r_dgst -alg SHA256 -string "hello string"

STRING DIGEST RESULT:

0000 - ca b0 b7 34 2c 65 f6 ab-a6 a3 c3 28 e9 1e 7c 70   ...4,e.....(..|p

0010 - bb 26 31 4b 89 05 c2 0b-68 ef 50 34 63 dd 0e 52   .&1K....h.P4c..R

 

real    0m0.10s

user    0m0.08s

sys     0m0.00s

 

 

Linux PowerPC WITH BSAFE 4.1.4:

 

# time ./r_dgst_fips -alg SHA256 -string "hello string"

STRING DIGEST RESULT:

0000 - ca b0 b7 34 2c 65 f6 ab-a6 a3 c3 28 e9 1e 7c 70   ...4,e.....(..|p

0010 - bb 26 31 4b 89 05 c2 0b-68 ef 50 34 63 dd 0e 52   .&1K....h.P4c..R

 

real    0m2.66s

user    0m0.39s

sys     0m0.02s

==============

Outcomes