Hello,
During test of nCipher module with openssl 0.9.7 snapshots I found
a problem with module working very slow. What could cause these
problem ? Explanation below:
1. Certificate Signing (private key RSA 1024 nCipher engine)
~~$ time for i in $(seq 1 100); do > demoCA/index.txt; openssl ca -in csr.csr
-batch -config openssl.cnf -engine chil -keyform e -keyfile rsa-1
-policy policy_anything 2>/dev/null 1>&2; done
Certificate Signing (private key RSA 1024 nCipher engine)
time 0m49.347s ( ~= 2 certificate/sec )
Certificate Signing (private key RSA 1024 OpenSSL engine)
time 0m1.183s ( ~= 84 certificate/sec )
2. RSA Speed (nCipher engine)
~~$ openssl speed rsa1024 -engine chil
engine "chil" set.
......................................
timing function used: times
sign verify sign/s verify/s
rsa 1024 bits 0.0000s 0.0000s 936000.0 37238.5
... I thing that is a joke :-)
3. Test RSA Speed (nCipher native library)
~~$ /opt/nfast/bin/sigtest -RSA -t10
Making 1024-bit RSAPrivate key on module #1
1, 146 58.4, 146 overall
..................................
10, 1499 150.133, 149.9 overall
It may be true because HSM is nForce 150 card. Tests with signing
PKCS#7 structure are similar.
regards,
--
Wojtek Ślusarczyk
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
