On 09/29/2016 08:35 PM, Christopher Schultz wrote: > All, > > In the past few years, jfclere has been dong some performance testing > with JSSE-based crypto versus OpenSSL-based crypto, and it had always > been clear that the pure-Java crypto was slower by orders of magnitude.
Correct, it is still slower (I need to redo my perf tests for the ApaccheCon in Seville to have the actual number to present :D). > > There was some concern that the hw-accelerated crypto wasn't actually > working as designed and that there may have been a bug causing the JVM > to fall-back to pure-Java instead of using the available hardware. > > Does anyone know if that issue was ever resolved? And if so, at what JVM > versions those patches were introduced? I remember that AES wasn't working as expected with old version of the JVM, but that is a long time ago, I complained and got a patch. I never had a real hardware accelerator to try so I can't tell, we have customers using hardware accelerators but that is through tomcat-native and openssl. Cheers Jean-Frederic
signature.asc
Description: OpenPGP digital signature
