[Opendnssec-develop] SoftHSM - Signing speed

Roy Arends roy at nominet.org.uk
Thu Dec 11 17:16:26 UTC 2008

Rickard Bondesson wrote on 12/11/2008 05:22:27 PM:

> The SoftHSM can now produce 2200 sig/sec (RSA768) with the 
> ./hsm-speed -t 9 -s 1 -p apaapa123 -i 20000 081211153928020162
> And RSA1024 gives 1700 sig/sec
> And RSA2048 gives 380 sig/sec
> This is without any compiler optimizations.
> What do you think about the speeds? Are they reasonable?

Very reasonable!

I assume that SoftHSM is using OpenSSL, right? Could you issue the OpenSSL 
speed command? "$ openssl speed rsa1024" for instance. This way you could 
kind of measure the additional overhead.

Good work, Rickard!


Roy Arends
Sr. Researcher
Nominet UK

More information about the Opendnssec-develop mailing list