Jean-Marc,
Jean-Marc Desperrier wrote:
They are some test of SSL hardware accelerator cards around.
They sometime show mixed results ; if you already have a lot of CPU power on your machine, some models of accelerators do not in fact actually accelerate it. It seems that the drivers are not always enough optimized so that the time spent communicating with the card can be longer than the time needed to do the calculation.
The card drivers and PKCS#11 libraries typically only become the bottleneck if you enable FIPS mode and use the crypto card for all the symmetric crypto algorithms. In this case, all the data traffic has to go to the card . This is always slower than doing the same thing in software. Sometimes it is offset by the fact that the hardware accelerates RSA, but it's often a mixed bag. You are much better off not running FIPS, using the card only for RSA operations, and letting NSS do the rest.
_______________________________________________
mozilla-crypto mailing list
[EMAIL PROTECTED]
http://mail.mozilla.org/listinfo/mozilla-crypto
