[B! aes] yassã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

yass id:yass

aesã«é–¢ã™ã‚‹yassã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (15)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

cloudpack night #7 ã«å‚åŠ ã—ã¾ã—ãŸ / EC2 ã«ãŠã‘ã‚‹ AES-NI ã®è©± - æ°´æ·±1024m
å…ˆæ—¥è¡Œã‚ã‚ŒãŸ cloudpack night #7 ã«å‚åŠ ã—ã¾ã—ãŸã€‚ http://www.zusaar.com/event/978005 ä¸»å‚¬ã•ã‚ŒãŸ cloudpack ã® id:yoshidashingo ã•ã‚“ã®ã¾ã¨ã‚ã¯ã“ã¡ã‚‰ã€‚ http://d.hatena.ne.jp/yoshidashingo/20130826/1377527798 æ–°å’å…¥ç¤¾5ãƒ¶æœˆç›®ã€ç¤¾ä¼šäººãªã‚ŠãŸã¦ã®ãºãƒ¼ãºãƒ¼ã§ã¯ã‚ã‚‹ã®ã§ã™ãŒã€ åƒè¶ŠãªãŒã‚‰è‹¥æ‰‹ LT æž ã§ç™ºè¡¨ã•ã›ã¦ã„ãŸã ãã¾ã—ãŸã€‚ EC2 ç’°å¢ƒã«ãŠã‘ã‚‹ AES-NI ã®æ€§èƒ½ã«ã¤ã„ã¦ç´¹ä»‹ã—ã¾ã—ãŸã€‚ AES æš—å·åŒ–ã™ã‚‹ãªã‚‰ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ã‚’ã‚ˆãè¦‹ãŸã»ã†ãŒè‰¯ã„ã§ã™ã‚ˆã€ã¨ã„ã†è©±ã§ã™ã€‚ LT ã®è³‡æ–™ã ã¨ã†ã¾ãã¾ã¨ã¾ã‚‰ãªã„æ°—ãŒã—ãŸã®ã§è¨˜äº‹ã¨ã„ã†å½¢ã§ã¾ã¨ã‚ã¦ãŠãã¾ã™ã€‚ AES-NI ã¨ã¯ è©³ç´°ã¯ã“ã“ã§èª¬æ˜Žã™ã‚‹ã‚ˆã‚Šã‚°ã‚°ã£ãŸã»ã†ãŒè‰¯ã„ã§ã™ã€‚ ä¸€è¨€ã§è¨€ã†ã¨ AES æš—å·ã® CPU ã‚µãƒãƒ¼
yass 2016/07/30
AES-NI

AES

ec2

ssl

OpenSSL
ãƒªãƒ³ã‚¯
zombees - OpenSSL: Cipher Selection
OpenSSL supports a number of different SSL ciphersuites, which can have a huge impact on the overhead that SSL imposes on HTTP traffic. Below I approach SSL from the performance side of things. Sites deploy HTTPS for one of two reasons: Financial or highly sensitive data is involved, there are regulations mandating security policies, and it would be extremely advantageous to someone if they obtain
yass 2014/11/22
ssl

rc4

aes

aes-ni

benchmark
ãƒªãƒ³ã‚¯
Universal SSL: How It Scales
On Monday, we announced Universal SSL, enabling HTTPS for all websites using CloudFlareâ€™s Free plan. Universal SSL represents a massive increase in the number of sites we serve over HTTPSâ€”from tens of thousands, to millions. People have asked us, both in comments and in person, how our servers handle this extra load. The answer, in a nutshell, is this: we found that with the right hardware, softwa
yass 2014/11/20
" we prioritize AES-based ciphers, and prefer AES-GCM to AES-CBC. /Â Smaller keys allow elliptic curve cryptography to be around 5-10x faster than RSA in general cases. For Universal SSL, we chose the elliptic curveÂ P-256 "

CloudFlare

ssl

aes

aes-ni

ecc

session ticket

session cache
ãƒªãƒ³ã‚¯
Ivan RistiÄ‡: Significant SSL/TLS improvements in Java 8
Â« How to build your own test for Apple's TLS authentication bug | Main | HTTPS mixed content: still the easiest way to break SSL Â» The next generation of the Java runtime, version 8, is around the corner, with the first production release planned for this month (March 2014). The new runtime brings a slew of language improvements and itâ€™s actually proving to be quite an exciting release. If you ask
yass 2014/11/20
ssl

java

java8

aes

aes-ni
ãƒªãƒ³ã‚¯
AES cipher internals in Excel
Here you can encrypt a block of bytes with a key using the popular Advanced Encryption Standard cipher. All the internal steps of the computation are shown, which can be helpful for anyone debugging their own AES implementation. In each of the 10/12/14 rounds, the sub-steps of SubBytes, ShiftRows, MixColumns, AddRoundKey, and key schedule are shown. Keep in mind that AES data squares are serialize
yass 2013/11/23
" Here I present the internal computations of the Advanced Encryption Standard cipher in a Microsoft Excel spreadsheet (also available for OpenOffice.org/LibreOffice). "

AES

Excel
ãƒªãƒ³ã‚¯
A Stick Figure Guide to the Advanced Encryption Standard (AES)
(A play in 4 acts. Please feel free to exit along with the stage character that best represents you. Take intermissions as you see fit. Click on the stage if you have a hard time seeing it. If you get bored, you can jump to the code. Most importantly, enjoy the show!) Act 1: Once Upon a Timeâ€¦ Act 2: Crypto Basics Act 3: Details Act 4: Math! Epilogue I created a heavily-commented AES/Rijndael imple
yass 2013/09/01
AES

toread
ãƒªãƒ³ã‚¯
è¦‹ã›ã¦ã‚‚ã‚‰ãŠã†ã‹ã€Intelã®AES-NIã®æ€§èƒ½ã¨ã‚„ã‚‰ã‚’ ã€œOpenSSLã§ãƒ™ãƒ³ãƒã—ã¦ã¿ãŸã€œ - ..ãŸã‚Œã‚ã..
AES-NI ã®ä¹—ã£ã¦ã‚‹ãƒžã‚·ãƒ³ãŒä½¿ãˆãŸã®ã§ OpenSSL ã§ãƒ™ãƒ³ãƒãƒžãƒ¼ã‚¯ã—ã¦ã¿ãŸã€‚ çµæžœï¼šAES-NI ãªã— 80ã€œ90MB/s AES-NI ã‚ã‚Š 500ã€œ530MB/s ã€Œé€šå¸¸ã®ï¼•å€ã®ã‚¹ãƒ”ãƒ¼ãƒ‰ã§å‡¦ç†ã—ã¦ã¾ã™ï¼ã€ã€Œåœ§å€’çš„ã˜ã‚ƒãªã„ã‹ã€æˆ‘ãŒè»ã¯ã€ ã‚¢ã‚¯ã‚»ãƒ©ãƒ¬ãƒ¼ã‚·ãƒ§ãƒ³å‘½ä»¤ã®åŠ¹æžœã£ã¦ã™ã”ã„ãï½— ç’°å¢ƒ ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ openssl-1.0.0-20.el6_2.3.x86_64 OpenSSL 1.0.0-fips 29 Mar 2010 built on: Wed Mar 28 01:11:34 BST 2012 options:bn(64,64) md2(int) rc4(16x,int) des(idx,cisc,16,int) aes(partial) blowfish(idx) compiler: gcc -fPIC -DOPENSSL_PIC -DZLIB -DOPENSSL_THRE
yass 2013/08/12
"AES-NI ã®ä¹—ã£ã¦ã‚‹ãƒžã‚·ãƒ³ãŒä½¿ãˆãŸã®ã§ OpenSSL ã§ãƒ™ãƒ³ãƒãƒžãƒ¼ã‚¯ã—ã¦ã¿ãŸã€‚ çµæžœï¼šAES-NI ãªã— 80ï½ž90MB/s AES-NI ã‚ã‚Š 500ï½ž530MB/s"

ssl

AES

AES-NI

cpu

OpenSSL
ãƒªãƒ³ã‚¯
TCP Fast Openã‚’è©¦ã—ã¦ã¿ã‚‹ - milieuã®æ—¥è¨˜
kernel3.8ãŒãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã¦ã¤ã„ã«TCP Fast OpenãŒã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã€ã‚µãƒ¼ãƒã‚µã‚¤ãƒ‰å…±ã«å®Ÿè£…ã•ãŸã€‚ã‚«ãƒ¼ãƒãƒ«ã®ã‚½ãƒ¼ã‚¹ã‚’è¦‹ã¦ã¿ã‚‹ã¨ã‚„ã¯ã‚Šçµæ§‹ãªå¤‰æ›´ã§patchã§2000è¡Œãƒ¬ãƒ™ãƒ«ã‚‰ã—ãã€ã“ã‚Œä»•äº‹ã§å®Ÿè£…ã—ãŸããªã„ãªãƒ¼ã¨ã„ã†ã‹ãƒã‚°ã‚’å‡ºã™è‡ªä¿¡ãŒã‚ã‚‹ã¨ã„ã†ã®ãŒæ£ç›´ãªæ„Ÿæƒ³ã ãŒã€ã¨ã‚Šã‚ãˆãšå‹•ä½œæ¦‚è¦ãã‚‰ã„ã¯çŸ¥ã£ã¦ãŠã‹ãªã„ã¨ã¾ãšã„ã®ã§éŠã‚“ã§ã¿ãŸã€‚TCP Fast Openã®èªè¨¼ï¼Ÿéƒ¨åˆ†ã§AESã‚’ä½¿ã†ã‚‰ã—ãSandy Bridgeãªã‚‰AES-NIã‚’ä½¿ãˆã°CPUè² è·çš„ã«å•é¡Œãªã„ã‹ã¨ã‹èª¿ã¹ãŸã‹ã£ãŸãŒã€å®¶ã§ä½¿ç”¨ã—ã¦ã„ã‚‹PCã¯CPUãŒæ®‹å¿µãªãŒã‚‰Westmereãªã®ã§ãã‚Œã¯è«¦ã‚ãŸã€‚å‹•ã‹ã™ã«ã‚ãŸã‚ŠFedora18ã‚’ç”¨æ„ã—ãªã„ã¨ï¼ã¨æ€ã„ãŸã¡VMç’°å¢ƒã«ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã€‚ãã†ã„ãˆã°Fedora18ãŒãƒªãƒªãƒ¼ã‚¹ã•ã‚ŒãŸå½“åˆã¯VMwareã«ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã‚’è©¦ã¿ãŸãŒå¤±æ•—ã—ãŸã¨ã„ã†è‹¦ã„è¨˜æ†¶ãŒè˜‡ãˆã£ãŸãŒã€ä»Šå›žã¯Virtualboxã ã£ãŸãŠã‹ã’
yass 2013/07/19
tcp

TCP Fast Open

linux

kernel

network

AES
ãƒªãƒ³ã‚¯
OpenVPNã®ã‚¹ãƒ«ãƒ¼ãƒ—ãƒƒãƒˆ
Optimizing performance on gigabit networks ã‹ã‚‰ã€‚ã„ã¤ã‚‚æœ‰ç”¨ãªæƒ…å ±ã‚’æä¾›ã—ã¦ãã‚Œã‚‹Jan Just Keijseræ°ã®OpenVPN Users MLã¸ã®æŠ•ç¨¿ã‚’ã‚‚ã¨ã«ã¾ã¨ã‚ã‚‰ã‚Œã¦ã„ã¾ã™ã€‚ è©³ç´°ã¯ä¸Šè¨˜ã‚µã‚¤ãƒˆã‚’å‚ç…§ã—ã¦ã„ãŸã ãã¨ã—ã¦ã€è¦ã¯ã€Œã„ã„æ€§èƒ½ã®PCã‚’ä½¿ã£ã¦Gigabitä¸Šã§OpenVPNã‚’ã¤ãªã„ã§ã¿ã¦ã€ã©ã“ã¾ã§ã‚¹ãƒ«ãƒ¼ãƒ—ãƒƒãƒˆã‚’ä¸Šã’ã‚‰ã‚Œã‚‹ã‹å®Ÿé¨“ã—ã¦ã¿ã‚ˆã†ï¼ã€ã¨ã„ã†ã“ã¨ã§ã™ã€‚OSã¯ã‚µãƒ¼ãƒãƒ¼ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¨ã‚‚Linuxã§ã™ã€‚ä»¥ä¸‹ã€çµæžœã‚’ç°¡å˜ã«ã¾ã¨ã‚ã‚‹ã¨ã“ã‚“ãªæ„Ÿã˜ï¼ˆã™ã¹ã¦è¨ˆæ¸¬å€¤ã¯iperfã«ã‚ˆã‚‹ã‚‚ã®ã§ã€ãƒ—ãƒãƒˆã‚³ãƒ«ã¯UDPã‚’ä½¿ç”¨ã—ã¦ã„ã¾ã™ï¼‰ã€‚ æ¨™æº–è¨å®šï¼ˆMTUã‚„Fragmentãªã©ã‚’ã„ã˜ã‚‰ãªã„ï¼†Cipherã¯Blowfishï¼‰ã®OpenVPNã‚¹ãƒ«ãƒ¼ãƒ—ãƒƒãƒˆã§156Mbpsã€‚Cipherã‚’aes-256-cbcã«å¤‰æ›´ã™ã‚‹ã¨Â 126Mbpsã€‚ä»Šå›žã®PCã®ã‚¹ãƒšãƒƒã‚¯ã§
yass 2013/02/09
openvpn

VPN

AES

AES-NI

MTU

network
ãƒªãƒ³ã‚¯
Announcing JBoss DNA 0.6 - JBoss.ORG
"Quarkus has surpassed the 1,000 contributor milestone" by Dimitrios Andreadis will explore the evolution and future of Quarkus, Red Hatâ€™s next-generation Java framework designed to optimize applications for cloud-native environments. "Java Quarkus â€¦ VIDEOS TO RE-WATCH This year, the Keycloak project was present at multiple conferences. Here are the videos to watch for the holiday break if you hav
yass 2013/02/09
cryptography

java

AES

AES-NI

CPU

intel
ãƒªãƒ³ã‚¯
ãƒ‡ãƒ¼ã‚¿ä¿è·ã®ãŸã‚ã®æ‰‹æ®µã€æš—å·å‡¦ç†ã‚’é«˜é€ŸåŒ–ã›ã‚ˆ ï¼ ï¼ IT
ç¬¬2å›ž ãƒ‡ãƒ¼ã‚¿ä¿è·ã®ãŸã‚ã®æ‰‹æ®µã€æš—å·å‡¦ç†ã‚’é«˜é€ŸåŒ–ã›ã‚ˆ ç«¹äº• æ·³ ã‚¤ãƒ³ãƒ†ãƒ«æ ªå¼ä¼šç¤¾ æŠ€è¡“æ”¿ç–æœ¬éƒ¨ã‚·ãƒ‹ã‚¢ãƒªã‚µãƒ¼ãƒãƒ£ãƒ¼ TCGæ—¥æœ¬æ”¯éƒ¨å…±åŒä»£è¡¨ å°æ± æµ©ä¹‹ ã‚¤ãƒ³ãƒ†ãƒ«æ ªå¼ä¼šç¤¾ æŠ€è¡“æœ¬éƒ¨ ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ 2010/10/22 æŒã¡é‹ã¹ã‚‹ãƒ‡ãƒã‚¤ã‚¹ã«ã¯ã€ã•ã¾ã–ã¾ãªãƒªã‚¹ã‚¯ãŒã‚ã‚‹ã€‚ãã®ãƒªã‚¹ã‚¯å›žé¿ã®æ´å²ã¨ã€å›žé¿ã®ãŸã‚ã®æŠ€è¡“å‹•å‘ã‚’3å›žã«ã‚ãŸã‚Šè§£èª¬ã™ã‚‹ï¼ˆç·¨é›†éƒ¨ï¼‰ ã‚¹ãƒˆãƒ¬ãƒ¼ã‚¸ã®ãƒ‡ãƒ¼ã‚¿ã‚’ä¿è·ã™ã‚‹æ‰‹æ®µ å‰å›žã®è¨˜äº‹ã§ã¯ã€ç¾ä»£ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®èª²é¡Œã‚’æŒ™ã’ã€ç¾åœ¨ã¾ã§ã®æ—¥æœ¬ã«ãŠã‘ã‚‹å¯¾ç–ã¨ç¾åœ¨åˆ©ç”¨ãªæŠ€è¡“ã‚’ç´¹ä»‹ã—ãŸã€‚ä»Šå›žã¯ã€ã€Œç‰©ç†çš„ãªç´›å¤±ã€ç›—é›£ã«ã‚ˆã‚Šæƒ…å ±ãŒä¸æ£ã«æ¼ãˆã„ã™ã‚‹è„…å¨ã€ã¸ã®å¯¾ç–ã¨ã—ã¦ã€ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã«ä¿å˜ã•ã‚Œã‚‹æƒ…å ±ã®æš—å·åŒ–ã‚’ã‚ãã‚‹ç¾çŠ¶ã‚’ç´¹ä»‹ã™ã‚‹ã€‚ ä¾‹ãˆã°ã€ç©ºæ¸¯ã€ã‚¿ã‚¯ã‚·ãƒ¼ã€ãƒ›ãƒ†ãƒ«ãªã©ã§ç´›å¤±ã—ãŸPCã«ã‚ˆã£ã¦ä¼šç¤¾ãŒè¢«ã‚‹æå®³é¡ã¯ã€å¹³å‡ã§1å°ã«ã¤ãç´„500ä¸‡å††å¼±ã¨ã„ã†èª¿æŸ»çµæžœãŒå ±å‘Šã•ã‚Œã¦ã„ã‚‹ã€‚ã“ã®èª¿æŸ»ã§ã¯ã€ç´›å¤±ãŒåˆ¤æ˜Žã™ã‚‹ã¾ã§
yass 2013/02/09
cryptography

AES

cpu

Intel

AES-NI

security
ãƒªãƒ³ã‚¯
Comparison of encryption ciphers in Java
Comparison of ciphers Java supports a number of standard symmetric and asymmetric encryption algorithms out of the box. This makes it easy to perform common tasks such as RSA encryption in Java. There are two broad issues to consider: choosing the encryption algorithm in the first place; choosing the key size and other configuration options. An inappropriate choice of key size or block mode, for e
yass 2013/02/07
java

cryptography

comparison

AES
ãƒªãƒ³ã‚¯
Linux*/Java* ã‚¹ã‚¿ãƒƒã‚¯ä¸Šã«ãŠã‘ã‚‹ã‚¤ãƒ³ãƒ†ãƒ«Â® AES-NI ãƒ‘ãƒ•ã‚©ãƒ¼ãƒžãƒ³ã‚¹ãƒ»ãƒ†ã‚¹ãƒˆ | iSUS
ã“ã®è¨˜äº‹ã¯ã€ã‚¤ãƒ³ãƒ†ãƒ«Â® ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ãƒ»ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã«æŽ²è¼‰ã•ã‚Œã¦ã„ã‚‹ã€ŒIntelÂ® AES-NI Performance Testing on Linux/Java Stackã€(http://software.intel.com/en-us/articles/intel-aes-ni-performance-testing-on-linux java-stack/) ã®æ—¥æœ¬èªžå‚è€ƒè¨³ã§ã™ã€‚ ç›®æ¬¡ 1. è¦æ—¨ 2. ã¯ã˜ã‚ã« 2.1. ç›®æ¨™ 2.2. ã‚¤ãƒ³ãƒ†ãƒ«Â® AES-NI ã®æ©Ÿèƒ½ 2.3. ç›®çš„ 2.4. å¯¾è±¡è€… 2.5. ç”¨èªž 2.6. è¬è¾ž 3. ã‚·ã‚¹ãƒ†ãƒ ã®ã‚»ãƒƒãƒˆã‚¢ãƒƒãƒ—ã¨è¨å®š 3.1. ã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆ 3.2. ãƒ†ã‚¹ãƒˆã‚·ã‚¹ãƒ†ãƒ ã§ã‚¤ãƒ³ãƒ†ãƒ«Â® AES-NI ã‚’æœ‰åŠ¹/ç„¡åŠ¹ã«ã™ã‚‹ 3.3. ãƒãƒ¼ã‚«ãƒ«ãƒ›ã‚¹ãƒˆã‹ã‚‰ã‚¤ãƒ³ãƒ†ãƒ«Â® AES-NI ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã‚’ç¢ºèªã™ã‚‹ 3.4. ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã®ã‚»ãƒƒãƒˆã‚¢ãƒƒãƒ— 3
yass 2012/12/09
java

jvm

linux

intel

cpu

cryptography

aes

AES-NI
ãƒªãƒ³ã‚¯
REST and Stateless Session IDs
yass 2011/12/04
cookie

session

rest

stateless

hmac

hash

cryptography

AES
ãƒªãƒ³ã‚¯
Announcing JBoss DNA 0.6 - JBoss.ORG
"Quarkus has surpassed the 1,000 contributor milestone" by Dimitrios Andreadis will explore the evolution and future of Quarkus, Red Hatâ€™s next-generation Java framework designed to optimize applications for cloud-native environments. "Java Quarkus â€¦ VIDEOS TO RE-WATCH This year, the Keycloak project was present at multiple conferences. Here are the videos to watch for the holiday break if you hav
yass 2011/08/28
HornetQ

jms

benchmark
ãƒªãƒ³ã‚¯
1