benchmarking mod_gnutls vs mod_ssl

[Werner Koch]

On Sat,  8 Mar 2008 12:41, nmav at gnutls.org said:

> So it seems libgcrypt is quite optimized in amd64... However there

Right, we have new optimized code for amd64 but the plain ia32 code is
pretty old and it might even be that the generic C implementation is
faster.

> with the small file). Possibly the RSA blinding...

I have a 10% performance penality for the blinding in mind.  Lets see:

$ ./benchmark --no-blinding rsa
Algorithm         generate  100*sign  100*verify
------------------------------------------------
RSA 1024 bit         390ms     890ms        20ms     680ms
RSA 2048 bit        2120ms    4220ms        80ms    4230ms

$ ./benchmark --no-blinding rsa
Algorithm         generate  100*sign  100*verify
------------------------------------------------
RSA 1024 bit         350ms     680ms        20ms     680ms
RSA 2048 bit        2110ms    4210ms        80ms    4230ms

$ ./benchmark --no-blinding rsa
Algorithm         generate  100*sign  100*verify
------------------------------------------------
RSA 1024 bit          60ms     710ms        30ms     660ms
RSA 2048 bit        1720ms    4230ms        80ms    4250ms


The last column is signing without blinding.  Except for the first test
(which is due to cache issues) I can't make out any difference.



Salam-Shalom,

   Werner


-- 
Die Gedanken sind frei.  Auschnahme regelt ein Bundeschgesetz.