[
https://issues.apache.org/jira/browse/SSHD-846?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16635644#comment-16635644
]
Goldstein Lyor commented on SSHD-846:
-------------------------------------
{quote} think it is still useful to nullify KeyPairGenerators {quote}
Agreed - the code will be patched accordingly...
> ECDH/HDG kex retains KeyPairGenerator
> -------------------------------------
>
> Key: SSHD-846
> URL: https://issues.apache.org/jira/browse/SSHD-846
> Project: MINA SSHD
> Issue Type: Bug
> Affects Versions: 1.6.0, 1.7.0, 2.0.0
> Reporter: Robert Varga
> Assignee: Goldstein Lyor
> Priority: Major
>
> Analysis of a heap dump of running OpenDaylight with 10K concurrent NETCONF
> sessions over SSH transport shows that around 16% of the heap is used by
> Bouncy Castle's KeyPairGeneratorSpi$EC and related objects – accounting for
> ~26% of OpenDaylight's per-session memory overhead.
> These objects are retained by org.apache.sshd.common.kex.ECDH's myKpairGen
> field, which is never used once a keypair is generated.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
