Re: AES GCM slow

2014-08-18 Thread Florian Weimer
On 01/27/2014 05:46 PM, Michael StJohns wrote: GCM uses a GF2 multiply as part of the integrity calculation. That operation is pretty expensive. My guess is that if the code was profiled, you'd find a lot of time being spent in com.sun.crypto.provider.GHASH. I ran into this and posted a fix:

AES GCM slow

2014-01-27 Thread Mark Christiaens
I wrote a little test client/server setup that transfers 100 MB of data over an SSL socket configured to use TLS 1.2 AES GCM (TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256). On my i7-4770 CPU @ 3.40GHz with OpenJDK 1.8.0-ea-b124 I get a transfer rate of around 5.2 MiB/second. I expected a higher

Re: AES GCM slow

2014-01-27 Thread Chris Hegarty
Cross posting to security-dev, since the question cipher related. -Chris. On 27/01/14 09:28, Mark Christiaens wrote: I wrote a little test client/server setup that transfers 100 MB of data over an SSL socket configured to use TLS 1.2 AES GCM (TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256). On my