[B! AES-NI] yassã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

yass id:yass

AES-NIã«é–¢ã™ã‚‹yassã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (11)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

cloudpack night #7 ã«å‚åŠ ã—ã¾ã—ãŸ / EC2 ã«ãŠã‘ã‚‹ AES-NI ã®è©± - æ°´æ·±1024m
å…ˆæ—¥è¡Œã‚ã‚ŒãŸ cloudpack night #7 ã«å‚åŠ ã—ã¾ã—ãŸã€‚ http://www.zusaar.com/event/978005 ä¸»å‚¬ã•ã‚ŒãŸ cloudpack ã® id:yoshidashingo ã•ã‚“ã®ã¾ã¨ã‚ã¯ã“ã¡ã‚‰ã€‚ http://d.hatena.ne.jp/yoshidashingo/20130826/1377527798 æ–°å’å…¥ç¤¾5ãƒ¶æœˆç›®ã€ç¤¾ä¼šäººãªã‚ŠãŸã¦ã®ãºãƒ¼ãºãƒ¼ã§ã¯ã‚ã‚‹ã®ã§ã™ãŒã€ åƒè¶ŠãªãŒã‚‰è‹¥æ‰‹ LT æž ã§ç™ºè¡¨ã•ã›ã¦ã„ãŸã ãã¾ã—ãŸã€‚ EC2 ç’°å¢ƒã«ãŠã‘ã‚‹ AES-NI ã®æ€§èƒ½ã«ã¤ã„ã¦ç´¹ä»‹ã—ã¾ã—ãŸã€‚ AES æš—å·åŒ–ã™ã‚‹ãªã‚‰ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ã‚’ã‚ˆãè¦‹ãŸã»ã†ãŒè‰¯ã„ã§ã™ã‚ˆã€ã¨ã„ã†è©±ã§ã™ã€‚ LT ã®è³‡æ–™ã ã¨ã†ã¾ãã¾ã¨ã¾ã‚‰ãªã„æ°—ãŒã—ãŸã®ã§è¨˜äº‹ã¨ã„ã†å½¢ã§ã¾ã¨ã‚ã¦ãŠãã¾ã™ã€‚ AES-NI ã¨ã¯ è©³ç´°ã¯ã“ã“ã§èª¬æ˜Žã™ã‚‹ã‚ˆã‚Šã‚°ã‚°ã£ãŸã»ã†ãŒè‰¯ã„ã§ã™ã€‚ ä¸€è¨€ã§è¨€ã†ã¨ AES æš—å·ã® CPU ã‚µãƒãƒ¼
yass 2016/07/30
AES-NI

AES

ec2

ssl

OpenSSL
ãƒªãƒ³ã‚¯
TLS termination: stunnel, nginx & stud, round 2
A month ago, I published an article on the compared performance of stunnel, nginx and stud as TLS terminators. The conclusion was to use stud on a 64-bit system, with session caching and AES. stunnel was unable to scale properly and nginx exhibited important latency issues. I got constructive comments on many aspects. Therefore, here is the second round. The protagonists are the same but both the
yass 2014/11/24
ssl

nginx

stud

stunnel

benchmark

AES-NI

hyper-threading
ãƒªãƒ³ã‚¯
zombees - OpenSSL: Cipher Selection
OpenSSL supports a number of different SSL ciphersuites, which can have a huge impact on the overhead that SSL imposes on HTTP traffic. Below I approach SSL from the performance side of things. Sites deploy HTTPS for one of two reasons: Financial or highly sensitive data is involved, there are regulations mandating security policies, and it would be extremely advantageous to someone if they obtain
yass 2014/11/22
ssl

rc4

aes

aes-ni

benchmark
ãƒªãƒ³ã‚¯
Universal SSL: How It Scales
On Monday, we announced Universal SSL, enabling HTTPS for all websites using CloudFlareâ€™s Free plan. Universal SSL represents a massive increase in the number of sites we serve over HTTPSâ€”from tens of thousands, to millions. People have asked us, both in comments and in person, how our servers handle this extra load. The answer, in a nutshell, is this: we found that with the right hardware, softwa
yass 2014/11/20
" we prioritize AES-based ciphers, and prefer AES-GCM to AES-CBC. /Â Smaller keys allow elliptic curve cryptography to be around 5-10x faster than RSA in general cases. For Universal SSL, we chose the elliptic curveÂ P-256 "

CloudFlare

ssl

aes

aes-ni

ecc

session ticket

session cache
ãƒªãƒ³ã‚¯
Ivan RistiÄ‡: Significant SSL/TLS improvements in Java 8
Â« How to build your own test for Apple's TLS authentication bug | Main | HTTPS mixed content: still the easiest way to break SSL Â» The next generation of the Java runtime, version 8, is around the corner, with the first production release planned for this month (March 2014). The new runtime brings a slew of language improvements and itâ€™s actually proving to be quite an exciting release. If you ask
yass 2014/11/20
ssl

java

java8

aes

aes-ni
ãƒªãƒ³ã‚¯
è¦‹ã›ã¦ã‚‚ã‚‰ãŠã†ã‹ã€Intelã®AES-NIã®æ€§èƒ½ã¨ã‚„ã‚‰ã‚’ ã€œOpenSSLã§ãƒ™ãƒ³ãƒã—ã¦ã¿ãŸã€œ - ..ãŸã‚Œã‚ã..
AES-NI ã®ä¹—ã£ã¦ã‚‹ãƒžã‚·ãƒ³ãŒä½¿ãˆãŸã®ã§ OpenSSL ã§ãƒ™ãƒ³ãƒãƒžãƒ¼ã‚¯ã—ã¦ã¿ãŸã€‚ çµæžœï¼šAES-NI ãªã— 80ã€œ90MB/s AES-NI ã‚ã‚Š 500ã€œ530MB/s ã€Œé€šå¸¸ã®ï¼•å€ã®ã‚¹ãƒ”ãƒ¼ãƒ‰ã§å‡¦ç†ã—ã¦ã¾ã™ï¼ã€ã€Œåœ§å€’çš„ã˜ã‚ƒãªã„ã‹ã€æˆ‘ãŒè»ã¯ã€ ã‚¢ã‚¯ã‚»ãƒ©ãƒ¬ãƒ¼ã‚·ãƒ§ãƒ³å‘½ä»¤ã®åŠ¹æžœã£ã¦ã™ã”ã„ãï½— ç’°å¢ƒ ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ openssl-1.0.0-20.el6_2.3.x86_64 OpenSSL 1.0.0-fips 29 Mar 2010 built on: Wed Mar 28 01:11:34 BST 2012 options:bn(64,64) md2(int) rc4(16x,int) des(idx,cisc,16,int) aes(partial) blowfish(idx) compiler: gcc -fPIC -DOPENSSL_PIC -DZLIB -DOPENSSL_THRE
yass 2013/08/12
"AES-NI ã®ä¹—ã£ã¦ã‚‹ãƒžã‚·ãƒ³ãŒä½¿ãˆãŸã®ã§ OpenSSL ã§ãƒ™ãƒ³ãƒãƒžãƒ¼ã‚¯ã—ã¦ã¿ãŸã€‚ çµæžœï¼šAES-NI ãªã— 80ï½ž90MB/s AES-NI ã‚ã‚Š 500ï½ž530MB/s"

ssl

AES

AES-NI

cpu

OpenSSL
ãƒªãƒ³ã‚¯
OpenVPNã®ã‚¹ãƒ«ãƒ¼ãƒ—ãƒƒãƒˆ
Optimizing performance on gigabit networks ã‹ã‚‰ã€‚ã„ã¤ã‚‚æœ‰ç”¨ãªæƒ…å ±ã‚’æä¾›ã—ã¦ãã‚Œã‚‹Jan Just Keijseræ°ã®OpenVPN Users MLã¸ã®æŠ•ç¨¿ã‚’ã‚‚ã¨ã«ã¾ã¨ã‚ã‚‰ã‚Œã¦ã„ã¾ã™ã€‚ è©³ç´°ã¯ä¸Šè¨˜ã‚µã‚¤ãƒˆã‚’å‚ç…§ã—ã¦ã„ãŸã ãã¨ã—ã¦ã€è¦ã¯ã€Œã„ã„æ€§èƒ½ã®PCã‚’ä½¿ã£ã¦Gigabitä¸Šã§OpenVPNã‚’ã¤ãªã„ã§ã¿ã¦ã€ã©ã“ã¾ã§ã‚¹ãƒ«ãƒ¼ãƒ—ãƒƒãƒˆã‚’ä¸Šã’ã‚‰ã‚Œã‚‹ã‹å®Ÿé¨“ã—ã¦ã¿ã‚ˆã†ï¼ã€ã¨ã„ã†ã“ã¨ã§ã™ã€‚OSã¯ã‚µãƒ¼ãƒãƒ¼ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¨ã‚‚Linuxã§ã™ã€‚ä»¥ä¸‹ã€çµæžœã‚’ç°¡å˜ã«ã¾ã¨ã‚ã‚‹ã¨ã“ã‚“ãªæ„Ÿã˜ï¼ˆã™ã¹ã¦è¨ˆæ¸¬å€¤ã¯iperfã«ã‚ˆã‚‹ã‚‚ã®ã§ã€ãƒ—ãƒãƒˆã‚³ãƒ«ã¯UDPã‚’ä½¿ç”¨ã—ã¦ã„ã¾ã™ï¼‰ã€‚ æ¨™æº–è¨å®šï¼ˆMTUã‚„Fragmentãªã©ã‚’ã„ã˜ã‚‰ãªã„ï¼†Cipherã¯Blowfishï¼‰ã®OpenVPNã‚¹ãƒ«ãƒ¼ãƒ—ãƒƒãƒˆã§156Mbpsã€‚Cipherã‚’aes-256-cbcã«å¤‰æ›´ã™ã‚‹ã¨Â 126Mbpsã€‚ä»Šå›žã®PCã®ã‚¹ãƒšãƒƒã‚¯ã§
yass 2013/02/09
openvpn

VPN

AES

AES-NI

MTU

network
ãƒªãƒ³ã‚¯
Announcing JBoss DNA 0.6 - JBoss.ORG
"Quarkus has surpassed the 1,000 contributor milestone" by Dimitrios Andreadis will explore the evolution and future of Quarkus, Red Hatâ€™s next-generation Java framework designed to optimize applications for cloud-native environments. "Java Quarkus â€¦ VIDEOS TO RE-WATCH This year, the Keycloak project was present at multiple conferences. Here are the videos to watch for the holiday break if you hav
yass 2013/02/09
cryptography

java

AES

AES-NI

CPU

intel
ãƒªãƒ³ã‚¯
ãƒ‡ãƒ¼ã‚¿ä¿è·ã®ãŸã‚ã®æ‰‹æ®µã€æš—å·å‡¦ç†ã‚’é«˜é€ŸåŒ–ã›ã‚ˆ ï¼ ï¼ IT
ç¬¬2å›ž ãƒ‡ãƒ¼ã‚¿ä¿è·ã®ãŸã‚ã®æ‰‹æ®µã€æš—å·å‡¦ç†ã‚’é«˜é€ŸåŒ–ã›ã‚ˆ ç«¹äº• æ·³ ã‚¤ãƒ³ãƒ†ãƒ«æ ªå¼ä¼šç¤¾ æŠ€è¡“æ”¿ç–æœ¬éƒ¨ã‚·ãƒ‹ã‚¢ãƒªã‚µãƒ¼ãƒãƒ£ãƒ¼ TCGæ—¥æœ¬æ”¯éƒ¨å…±åŒä»£è¡¨ å°æ± æµ©ä¹‹ ã‚¤ãƒ³ãƒ†ãƒ«æ ªå¼ä¼šç¤¾ æŠ€è¡“æœ¬éƒ¨ ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ 2010/10/22 æŒã¡é‹ã¹ã‚‹ãƒ‡ãƒã‚¤ã‚¹ã«ã¯ã€ã•ã¾ã–ã¾ãªãƒªã‚¹ã‚¯ãŒã‚ã‚‹ã€‚ãã®ãƒªã‚¹ã‚¯å›žé¿ã®æ´å²ã¨ã€å›žé¿ã®ãŸã‚ã®æŠ€è¡“å‹•å‘ã‚’3å›žã«ã‚ãŸã‚Šè§£èª¬ã™ã‚‹ï¼ˆç·¨é›†éƒ¨ï¼‰ ã‚¹ãƒˆãƒ¬ãƒ¼ã‚¸ã®ãƒ‡ãƒ¼ã‚¿ã‚’ä¿è·ã™ã‚‹æ‰‹æ®µ å‰å›žã®è¨˜äº‹ã§ã¯ã€ç¾ä»£ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®èª²é¡Œã‚’æŒ™ã’ã€ç¾åœ¨ã¾ã§ã®æ—¥æœ¬ã«ãŠã‘ã‚‹å¯¾ç–ã¨ç¾åœ¨åˆ©ç”¨ãªæŠ€è¡“ã‚’ç´¹ä»‹ã—ãŸã€‚ä»Šå›žã¯ã€ã€Œç‰©ç†çš„ãªç´›å¤±ã€ç›—é›£ã«ã‚ˆã‚Šæƒ…å ±ãŒä¸æ£ã«æ¼ãˆã„ã™ã‚‹è„…å¨ã€ã¸ã®å¯¾ç–ã¨ã—ã¦ã€ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã«ä¿å˜ã•ã‚Œã‚‹æƒ…å ±ã®æš—å·åŒ–ã‚’ã‚ãã‚‹ç¾çŠ¶ã‚’ç´¹ä»‹ã™ã‚‹ã€‚ ä¾‹ãˆã°ã€ç©ºæ¸¯ã€ã‚¿ã‚¯ã‚·ãƒ¼ã€ãƒ›ãƒ†ãƒ«ãªã©ã§ç´›å¤±ã—ãŸPCã«ã‚ˆã£ã¦ä¼šç¤¾ãŒè¢«ã‚‹æå®³é¡ã¯ã€å¹³å‡ã§1å°ã«ã¤ãç´„500ä¸‡å††å¼±ã¨ã„ã†èª¿æŸ»çµæžœãŒå ±å‘Šã•ã‚Œã¦ã„ã‚‹ã€‚ã“ã®èª¿æŸ»ã§ã¯ã€ç´›å¤±ãŒåˆ¤æ˜Žã™ã‚‹ã¾ã§
yass 2013/02/09
cryptography

AES

cpu

Intel

AES-NI

security
ãƒªãƒ³ã‚¯
Linux*/Java* ã‚¹ã‚¿ãƒƒã‚¯ä¸Šã«ãŠã‘ã‚‹ã‚¤ãƒ³ãƒ†ãƒ«Â® AES-NI ãƒ‘ãƒ•ã‚©ãƒ¼ãƒžãƒ³ã‚¹ãƒ»ãƒ†ã‚¹ãƒˆ | iSUS
ã“ã®è¨˜äº‹ã¯ã€ã‚¤ãƒ³ãƒ†ãƒ«Â® ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ãƒ»ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã«æŽ²è¼‰ã•ã‚Œã¦ã„ã‚‹ã€ŒIntelÂ® AES-NI Performance Testing on Linux/Java Stackã€(http://software.intel.com/en-us/articles/intel-aes-ni-performance-testing-on-linux java-stack/) ã®æ—¥æœ¬èªžå‚è€ƒè¨³ã§ã™ã€‚ ç›®æ¬¡ 1. è¦æ—¨ 2. ã¯ã˜ã‚ã« 2.1. ç›®æ¨™ 2.2. ã‚¤ãƒ³ãƒ†ãƒ«Â® AES-NI ã®æ©Ÿèƒ½ 2.3. ç›®çš„ 2.4. å¯¾è±¡è€… 2.5. ç”¨èªž 2.6. è¬è¾ž 3. ã‚·ã‚¹ãƒ†ãƒ ã®ã‚»ãƒƒãƒˆã‚¢ãƒƒãƒ—ã¨è¨å®š 3.1. ã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆ 3.2. ãƒ†ã‚¹ãƒˆã‚·ã‚¹ãƒ†ãƒ ã§ã‚¤ãƒ³ãƒ†ãƒ«Â® AES-NI ã‚’æœ‰åŠ¹/ç„¡åŠ¹ã«ã™ã‚‹ 3.3. ãƒãƒ¼ã‚«ãƒ«ãƒ›ã‚¹ãƒˆã‹ã‚‰ã‚¤ãƒ³ãƒ†ãƒ«Â® AES-NI ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã‚’ç¢ºèªã™ã‚‹ 3.4. ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã®ã‚»ãƒƒãƒˆã‚¢ãƒƒãƒ— 3
yass 2012/12/09
java

jvm

linux

intel

cpu

cryptography

aes

AES-NI
ãƒªãƒ³ã‚¯
Announcing JBoss DNA 0.6 - JBoss.ORG
"Quarkus has surpassed the 1,000 contributor milestone" by Dimitrios Andreadis will explore the evolution and future of Quarkus, Red Hatâ€™s next-generation Java framework designed to optimize applications for cloud-native environments. "Java Quarkus â€¦ VIDEOS TO RE-WATCH This year, the Keycloak project was present at multiple conferences. Here are the videos to watch for the holiday break if you hav
yass 2011/08/28
HornetQ

jms

benchmark
ãƒªãƒ³ã‚¯
1