I recognize that quote ... it's from my TechDoc WP100647 'A Clear Key / Secure Key / Primer Key Primer' on the www.ibm.com/support/techdocs website. For more (better) performance data I would refer you to the Crypto Performance Whitepapers. They are available at: http://www.ibm.com/systems/z/advantages/security/zec12cryptography.html (for the zEC12) http://www.ibm.com/systems/z/advantages/security/z10cryptography.html (for the z10 and z196) (Look under 'Learn more' on the right for the individual reports.)
I don't believe any of those reports specifically cover the CSNBKEX/CSNBKIM APIs, but the report will show the relative performance of the CPACF vs the Crypto Express cards. CSNBKEX (Key Export) and CSNBKIM (Key Import) are both secure key APIs, which are executed on the Crypto Express cards. As Phil pointed out, as a secure key device they are more focused on security than performance. As Radoslaw pointed out, when configured as an accelerator the card does provide very good performance and throughput, however, the secure key functions are going to suffer from latency and data transmission time, getting the work to the card and the results back from the card. Greg Boyd IBM Advanced Technical Support Supporting Crypto on System z ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
