Intel AES-NI Application Performance
•Download as PPTX, PDF•
1 like•969 views
An investigation into the application impact of employing Intel AES-NI
Recommended
More Related Content
Similar to Intel AES-NI Application Performance
Similar to Intel AES-NI Application Performance (20)
Recently uploaded
Recently uploaded (20)
Intel AES-NI Application Performance
- 1. Less Painful Application Encryption April, 2015 Niall O’Connor Chief Technology Officer Boston Security Conference #4
- 2. MAKE PERSONALIZED MEDICINE A REALITY
- 4. WE ENCRYPT A LOT OF DATA Patient Data PGP Encryption Transform Raw Data Into Results AES 256 bit Encryption AES Decryption AES Decryption AES Decryption
- 5. Transparent Encryption & Optimization
- 6. Encryption as a Persistence Rule ● Readable ● Understandable encryption model ● No database dependency
- 7. ENCRYPTION PERFORMANCE IMPACT IS OVERSTATED …but worth minimizing.
- 8. OPTIMIZING THE ADVANCED ENCRYPTION STANDARD (AES)
- 9. Full Round SubBytes – Each byte was substituted ShiftRows – Last three rows of block is shifted cyclically MixColumns – Block columns are shifted AddRoundKey Last Round SubBytes ShiftRows AddRoundKey 128 bit Key = 10 192 bit Key = 12 256 bit Key = 14 First Round AddRoundKey – Each byte is XOR’d with each byte of round key KeyExpansion – create round keys from cipher key AES Algorithm
- 10. Block Cipher Mode of Operation 0 50 100 150 200 250 300 350 CFB CTR OFB CBC ECB ms Mode 44%
- 11. ECB Not so Fast
- 12. Block Cipher Mode of Operation 0 50 100 150 200 250 300 350 CFB CTR OFB CBC ECB ms 36%
- 13. Provider Library 0 50 100 150 200 250 BC SunJCE NSS ms Encrypt Decrypt 36%
- 14. ADVANCED ENCRYPTION STANDARD NEW INSTRUCTIONS (AES-NI)
- 15. Full Round SubBytes ShiftRows MixColumns AddRoundKey Last Round SubBytes ShiftRows AddRoundKey First Round AddRoundKey KeyExpansion AESENC/AESDEC AESENCLAST/AESDECLAST AESENC/AESDEC AESKEYGENASSIST AES Algorithm Steps Intel AES-NI Hardware Operations
- 16. Provider Library (AES-NI) 0 50 100 150 200 250 BC SunJCE NSS ms Provider Library AES AES-NI 136.5ms 93%
- 17. AES-NI Impact on Key Length 0 20 40 60 80 100 120 140 160 180 128 bit 192 bit 256 bit AES AES-NI
- 18. AES-NI Key Length 0 5 10 15 20 25 30 35 40 128→192 128→256 AxisTitle Axis Title AES AES-ni
- 20. Average Attribute Request Time 0 0.5 1 1.5 2 2.5 3 3.5 AES AES-NI ms Processing DB.attributeDesc Decrypt Deserialization DB.attribute 3.7%
- 21. Platelet Count Request Time 0 0.5 1 1.5 2 2.5 3 3.5 AES AES-NI ms processing DB.attributeDesc decryptTime OFF deserializeTime OFF DB.attribute 8.9%
- 22. Scaling Decryption Time 0 10 20 30 40 50 60 70 80 90 765 1000 10000 100000 ms Patients AES AES-NI
- 23. Conclusion • Choose your Provider Library wisely • Operating mode • Key Length • Encryption not an application bottleneck • Scalable data encryption
- 24. Acknowledgements Ketan Patel and David Houlding @ Intel Ryan Kophs @ GenoSpace Any Questions? Niall O’Connor Chief Technology Officer Boston Security Conference #4
Editor's Notes
- Nate—should this get moved up to end the first section?