But I am very much worried about the PERFORMANCE. After "org.apache.xml.security.Init.init()" of xml security is called (during authentication), calling Call.invoke method takes more time. The difference is in the order of multiples of 5.
Verifying signatures is a very expensive operation.. Back in the days when we were extremely serious about performance it could take up to a second on a P100 and that was just the verify.. With XML-DSig there's a whole bunch of extra parsing and verification to be done, slowing it down even more. Of course computers are a lot more powerful, but I think they pretty much keep up :)
Have any of you faced this problem? Why org.apache.xml.security.Init.init() slows down the Call.invoke()
Is the performance really Init.init()? Cause that might take a while, but that should only be one once. Subsequent calls to this method should return instantly.
Erwin
