Re: AES GCM slow

2014-01-27 Thread Mark Christiaens
Silly me, forgot to mention that I'm working on Ubuntu, 64 bit, 13.10. So, AES-CBC seems to be reasonably fast (100 MiB/s) but AES-GCM is slow (5.2 MiB/s). I'm particularly curious about the GCM one because I get the impression that OpenSSL should be able to reach in the GB/s for AES-GCM encrypti

Re: AES GCM slow

2014-01-27 Thread Xuelei Fan
What's the platform are you using for the testing? Windows, Linux, Solaris or Mac OS? GCM are now only implemented in SunJCE provider. I want to make sure the crypto provider for AES-CBC, which is different for different platforms by default, is not the major cause of the performance impact. Th

Re: AES GCM slow

2014-01-27 Thread Chris Hegarty
Cross posting to security-dev, since the question cipher related. -Chris. On 27/01/14 09:28, Mark Christiaens wrote: I wrote a little test client/server setup that transfers 100 MB of data over an SSL socket configured to use TLS 1.2 AES GCM (TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256). On my i7-

AES GCM slow

2014-01-27 Thread Mark Christiaens
I wrote a little test client/server setup that transfers 100 MB of data over an SSL socket configured to use TLS 1.2 AES GCM (TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256). On my i7-4770 CPU @ 3.40GHz with OpenJDK 1.8.0-ea-b124 I get a transfer rate of around 5.2 MiB/second. I expected a higher speed.