<html>
<body>
At 09:23 AM 1/27/2014, Mark Christiaens wrote:<br>
<blockquote type=cite class=cite cite="">Silly me, forgot to mention that
I'm working on Ubuntu, 64 bit, 13.10.<br><br>
So, AES-CBC seems to be reasonably fast (100 MiB/s) but AES-GCM is slow
(5.2 MiB/s). Â I'm particularly curious about the GCM one because I get
the impression that OpenSSL should be able to reach in the GB/s for
AES-GCM encryption/authentication. <br><br>
Mark<br>
</blockquote><br><br>
GCM uses a GF2 multiply as part of the integrity calculation. That
operation is pretty expensive. My guess is that if the code was
profiled, you'd find a lot of time being spent in
com.sun.crypto.provider.GHASH.<br><br>
The more recent intel processors have a set of instructions that
substantially improve this performance -
<a href="http://en.wikipedia.org/wiki/CLMUL_instruction_set" eudora="autourl">
http://en.wikipedia.org/wiki/CLMUL_instruction_set</a> - but the code in
the standard provider is all pure java and doesn't take advantage of this
as far as I can tell. I believe that the more recent versions of
OpenSSL *have* been updated to take advantage of the new instructions
which explains their performance.<br><br>
The same processors generally also support an AES instruction set so if
someone were to build a native version of this it might be useful to also
replace/augment the default AES block cipher implementation.<br><br>
Also see
<a href="http://software.intel.com/en-us/articles/intel-aes-ni-performance-testing-on-linuxjava-stack" eudora="autourl">
http://software.intel.com/en-us/articles/intel-aes-ni-performance-testing-on-linuxjava-stack</a>
<br><br>
Mike<br><br>
<br><br>
<blockquote type=cite class=cite cite="">On Mon, Jan 27, 2014 at 3:19 PM,
Xuelei Fan
<<a href="mailto:xuelei.fan@oracle.com">xuelei.fan@oracle.com</a>>
wrote:<br>
<dl>
<dd>What's the platform are you using for the testing? Â Windows,
Linux,<br>
<dd>Solaris or Mac OS? Â GCM are now only implemented in SunJCE provider.
 I<br>
<dd>want to make sure the crypto provider for AES-CBC, which is
different<br>
<dd>for different platforms by default, is not the major cause of
the<br>
<dd>performance impact.<br><br>
<dd>Thanks for the performance measure.<br><br>
<dd>Regards,<br>
<dd>Xuelei<br><br>
<dd>On 1/27/2014 5:34 PM, Chris Hegarty wrote:<br>
<dd>> Cross posting to security-dev, since the question cipher
related.<br>
<dd>><br>
<dd>> -Chris.<br>
<dd>><br>
<dd>> On 27/01/14 09:28, Mark Christiaens wrote:<br>
<dd>>> I wrote  a little test client/server setup that transfers
100 MB of data<br>
<dd>>> over an SSL socket configured to use TLS 1.2 AES GCM<br>
<dd>>> (TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256). Â On my i7-4770
CPU @ 3.40GHz<br>
<dd>>> with OpenJDK 1.8.0-ea-b124 I get a transfer rate of around
5.2<br>
<dd>>> MiB/second. Â I expected a higher speed. Â Using<br>
<dd>>> TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 I reach 100 MiB/s. Â
Is this to<br>
<dd>>> be expected?<br>
<dd>>><br>
<dd>>> For reference, here is my code:<br>
<dd>>><br>
<dd>>> ///// Client.java<br>
<dd>>><br>
<dd>>> package ssl;<br>
<dd>>><br>
<dd>>> import javax.net.ssl.*;<br>
<dd>>> import java.io.*;<br>
<dd>>> import java.util.Arrays;<br>
<dd>>><br>
<dd>>> public class Client {<br>
<dd>>><br>
<dd>>> Â Â Â public static void main(String[] arstring)
{<br>
<dd>>> Â Â Â Â Â try {<br>
<dd>>> Â Â Â Â Â Â Â
SSLSocketFactory sslsocketfactory = (SSLSocketFactory)<br>
<dd>>> SSLSocketFactory.getDefault();<br>
<dd>>> Â Â Â Â Â Â Â SSLSocket
sslsocket = (SSLSocket)<br>
<dd>>> sslsocketfactory.createSocket("localhost",
9999);<br>
<dd>>> Â Â Â Â Â Â Â
Helper.requireAESCipherSuites(sslsocket);<br>
<dd>>> Â Â Â Â Â Â Â
sslsocket.setEnabledProtocols(new String[]{"TLSv1.2"});<br>
<dd>>><br>
<dd>>> Â Â Â Â Â Â Â try
(OutputStream outputstream =<br>
<dd>>> sslsocket.getOutputStream()) {<br>
<dd>>> Â Â Â Â Â Â Â
  byte[] buf = new byte[Helper.BUF_SIZE];<br>
<dd>>> Â Â Â Â Â Â Â
  Arrays.fill(buf, (byte) 1);<br>
<dd>>> Â Â Â Â Â Â Â
  for (int i = 0; i < Helper.BUF_COUNT; ++i) {<br>
<dd>>> Â Â Â Â Â Â Â
    outputstream.write(buf);<br>
<dd>>> Â Â Â Â Â Â Â
  }<br>
<dd>>><br>
<dd>>> Â Â Â Â Â Â Â
  System.out.println("Using cipher suite: " +<br>
<dd>>> (sslsocket.getSession()).getCipherSuite());<br>
<dd>>><br>
<dd>>> Â Â Â Â Â Â Â
  outputstream.flush();<br>
<dd>>> Â Â Â Â Â Â Â }<br>
<dd>>><br>
<dd>>> Â Â Â Â Â } catch (IOException
exception) {<br>
<dd>>> Â Â Â Â Â Â Â
exception.printStackTrace();<br>
<dd>>> Â Â Â Â Â }<br>
<dd>>> Â Â Â }<br>
<dd>>> }<br>
<dd>>><br>
<dd>>> ///// Server.java<br>
<dd>>><br>
<dd>>> package ssl;<br>
<dd>>><br>
<dd>>> import javax.net.ssl.*;<br>
<dd>>> import java.io.*;<br>
<dd>>><br>
<dd>>> public class Server {<br>
<dd>>><br>
<dd>>> Â Â Â public static void main(String[] arstring)
{<br>
<dd>>> Â Â Â Â Â try {<br>
<dd>>> Â Â Â Â Â Â Â
SSLServerSocketFactory sslserversocketfactory =<br>
<dd>>> (SSLServerSocketFactory)
SSLServerSocketFactory.getDefault();<br>
<dd>>> Â Â Â Â Â Â Â
SSLServerSocket sslserversocket = (SSLServerSocket)<br>
<dd>>> sslserversocketfactory.createServerSocket(9999);<br>
<dd>>> Â Â Â Â Â Â Â SSLSocket
sslsocket = (SSLSocket) sslserversocket.accept();<br>
<dd>>><br>
<dd>>> Â Â Â Â Â Â Â
InputStream inputstream = sslsocket.getInputStream();<br>
<dd>>><br>
<dd>>> Â Â Â Â Â Â Â byte[] buf
= new byte[Helper.BUF_SIZE];<br>
<dd>>> Â Â Â Â Â Â Â long
bytesToRead = BYTES_TO_READ;<br>
<dd>>><br>
<dd>>> Â Â Â Â Â Â Â long
startTime = System.currentTimeMillis();<br>
<dd>>><br>
<dd>>> Â Â Â Â Â Â Â while
(bytesToRead > 0) {<br>
<dd>>> Â Â Â Â Â Â Â
  bytesToRead -= inputstream.read(buf);<br>
<dd>>> Â Â Â Â Â Â Â }<br>
<dd>>><br>
<dd>>> Â Â Â Â Â Â Â long
stopTime = System.currentTimeMillis();<br>
<dd>>> Â Â Â Â Â Â Â long
totalTimeMs = stopTime - startTime;<br>
<dd>>> Â Â Â Â Â Â Â double
mbRead = BYTES_TO_READ / (1024.0 * 1024);<br>
<dd>>> Â Â Â Â Â Â Â double
totalTimeSeconds = totalTimeMs / 1000.0;<br>
<dd>>> Â Â Â Â Â Â Â double
mibPerSecond = mbRead / totalTimeSeconds;<br>
<dd>>><br>
<dd>>> Â Â Â Â Â Â Â
System.out.println("Using cipher suite: " +<br>
<dd>>> (sslsocket.getSession()).getCipherSuite());<br>
<dd>>> Â Â Â Â Â Â Â
System.out.println("Read " + mbRead + "MiB in "
+<br>
<dd>>> totalTimeSeconds + "s");<br>
<dd>>> Â Â Â Â Â Â Â
System.out.println("Bandwidth: " + mibPerSecond +
"MiB/s");<br>
<dd>>><br>
<dd>>> Â Â Â Â Â } catch (IOException
exception) {<br>
<dd>>> Â Â Â Â Â Â Â
exception.printStackTrace();<br>
<dd>>> Â Â Â Â Â }<br>
<dd>>> Â Â Â }<br>
<dd>>><br>
<dd>>> Â Â Â private static final int BYTES_TO_READ =
Helper.BUF_COUNT *<br>
<dd>>> Helper.BUF_SIZE;<br>
<dd>>> }<br>
<dd>>><br>
<dd>>> ///// Helper.java<br>
<dd>>><br>
<dd>>> package ssl;<br>
<dd>>><br>
<dd>>> import java.util.*;<br>
<dd>>> import java.util.regex.*;<br>
<dd>>> import javax.net.ssl.*;<br>
<dd>>><br>
<dd>>> public class Helper {<br>
<dd>>><br>
<dd>>> Â Â Â static int BUF_SIZE = 1024 * 1024;<br>
<dd>>> Â Â Â static int BUF_COUNT = 100;<br>
<dd>>><br>
<dd>>> Â Â Â static SSLSocket
requireAESCipherSuites(SSLSocket socket) {<br>
<dd>>> Â Â Â Â Â String
supportedCipherSuites[] =<br>
<dd>>> socket.getSupportedCipherSuites();<br>
<dd>>><br>
<dd>>> Â Â Â Â Â
System.out.println("Supported cipher suite: " +<br>
<dd>>> Arrays.toString(supportedCipherSuites));<br>
<dd>>><br>
<dd>>> Â Â Â Â Â List<String>
selectedCipherSuites = new ArrayList<>();<br>
<dd>>><br>
<dd>>> // Â Â Â Â String patternString =
".*";<br>
<dd>>> Â Â Â Â Â String patternString =
"TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256";<br>
<dd>>> // Â Â Â Â String patternString =<br>
<dd>>> "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256";<br>
<dd>>><br>
<dd>>> Â Â Â Â Â Pattern pattern =
Pattern.compile(patternString);<br>
<dd>>><br>
<dd>>> Â Â Â Â Â for (String cipherSuite :
supportedCipherSuites) {<br>
<dd>>> Â Â Â Â Â Â Â Matcher
matcher = pattern.matcher(cipherSuite);<br>
<dd>>> Â Â Â Â Â Â Â if
(matcher.find()) {<br>
<dd>>> Â Â Â Â Â Â Â
  selectedCipherSuites.add(cipherSuite);<br>
<dd>>> Â Â Â Â Â Â Â }<br>
<dd>>> Â Â Â Â Â }<br>
<dd>>><br>
<dd>>> Â Â Â Â Â
System.out.println("Selected cipher suites: " +<br>
<dd>>> selectedCipherSuites);<br>
<dd>>><br>
<dd>>> Â Â Â Â Â
socket.setEnabledCipherSuites(selectedCipherSuites.toArray(new<br>
<dd>>> String[0]));<br>
<dd>>><br>
<dd>>> Â Â Â Â Â return socket;<br>
<dd>>> Â Â Â }<br>
<dd>>> }<br>
<dd>>><br><br>
</dl><br><br>
<br>
-- <br>
Mark Christiaens<br>
Ganzeplas 23<br>
9880 Aalter<br>
09 / 325 07 40 </blockquote></body>
<br>
</html>