[Opendnssec-develop] SoftHSM performance

[Rickard Bellgrim]

Hi

I have compared the performance between SoftHSMv1 and SoftHSMv2
(OpenSSL and Botan).

SoftHSMv2 OpenSSL:
ods-hsmspeed -r SoftHSM -i 50000 -s 1024 -t 1
1032.66 sig/s

SoftHSMv2 Botan:
ods-hsmspeed -r SoftHSM -i 10000 -s 1024 -t 1
236.15 sig/s

SoftHSMv1:
ods-hsmspeed -r SoftHSM -i 50000 -s 1024 -t 1
1376.68 sig/s

SoftHSMv2 is currently having some threading issues. Thus not possible
to do multi-threaded tests.

The negative with Botan is the overhead when e.g. creating the RSA C++
object. SoftHSMv1 utilizes an object cache, so that the Botan key
objects does not need to be recreated all of the time. Is that
something we want for SoftHSMv2? E.g. an 1-key cache?

// Rickard