ibm 4765 pcie performance measaurements, cca release...

Performance MeasurementsIBM 4765 PCIe Cryptographic Coprocessor

CCA Release 4.2.5

IBM conducted performance tests in its lab using the following criteria:

1. The verbs were run on a single IBM 4765-001 PCIe Cryptographic Coprocessor.2. The verbs were run using Release 4.2.5 of the IBM Common Cryptographic Architecture (CCA) software.3. The tests were measured from a CCA application program.4. The test application was run on an IBM ServerProven® System x™ host server.5. The test application utilized the standard CCA application programming interface (API).6. The operating system used by the host server was SUSE Linux Enterprise Server 11 Service Pack 1 (32-

bit) by Novell.7. No other application programs were running on the host server while the tests were running.

The following data shows performance measurements based on the criteria shown above using selected CCA verbs. Performance can be affected by many factors. IBM does not guarantee that you will achieve the same performance numbers given in this table. This information is provided 'AS IS' and without warranty, express or implied. By quoting a particular key length or cryptographic algorithm, one may not conclude that IBM implies the key length or cryptographic algorithm are adequate and can therefore be used safely. The cryptographic functions described below may not be available in all countries and may be subject to export regulations.

FunctionData block sizes

Single- threaded host application (calls/sec)

Single- threaded host application Kbytes/sec

Multi-threaded (7 threads) in host application (calls/sec)

Multi-threaded (7 threads) in host application Kbytes/sec

Clear PIN Generate Alternate (CSNBCPA)

2429.49 2811.67

Clear PIN Encrypt (CSNBCPE)

3160.87 3825.94

Diversified Key Generate (CSNBDKG)

1631.41 1787.55

Encrypted PIN Generate (CSNBEPG)

2487.56 2886.77

Prohibit Export (CSNBPEX)

3323.02 4104.73

Clear PIN Generate (CSNBPGN)

3410.33 4208.21

PKA Key Import (CSNDPKI)

1620.39 1755.79

Encrypted PIN Translate (CSNBPTR)

2375.12 2741.16

Encrypted PIN Verify (CSNBPVR)

2476.07 2862.10

Key Generate (CSNBKGN)

2071.13 2374.60

Key Test (CSNBKYT) 2868.40 3404.95

Random Number Generate - 8 bytes per request (CSNBRNG)

5846.37 8897.06

IBM 4765 Performance Measurements 1 of 22 CCA Release 4.2.5






Encipher (CSNBENC) – Encrypt data with Single-DES

8163264

128256512

1024204840968192

163843276865536

131072262144524288

1024000

3221.803213.133213.043209.093205.173191.953177.563136.652942.482742.442360.831821.021197.30

550.72300.09157.06

79.9040.65

25.7751.41

102.82205.38410.26817.14

1626.913211.936026.21

11233.0619339.9729835.6139233.1636092.4439334.1841173.3941895.3341625.60

3722.323604.803681.013596.593696.713598.673646.203860.513574.773533.193439.093063.662224.68

930.40496.07258.12132.04

67.36

29.7857.68

117.79230.18473.18921.26

1866.893953.177321.14

14471.9528173.0450195.0972898.3160975.2265021.8067665.9269227.5168983.81

Encipher (CSNBENC) – Encrypt data with Triple-DES

8163264

128256512

1024204840968192

163843276865536

131072262144524288

1024000

3092.033085.493082.573082.323075.643068.662942.272895.322720.782419.521964.221410.85

875.80411.79219.95113.85

57.6829.39

24.7449.3798.64

197.27393.68785.58

1506.442964.815572.179910.38

16090.9523115.4628698.2526987.6628830.0729845.8830240.9330098.43

3327.683337.473268.223366.643387.493271.583449.663439.203422.083294.823255.053013.202166.26

851.29478.75251.84128.09

65.53

26.6253.40

104.58215.47433.60837.52

1766.233521.747008.43

13495.5926665.4449368.3070984.0455790.3462751.5166018.3467160.2467102.72







MAC Generate (CSNBMGN) – Generate Single-DES MAC

8163264

128256512

1024204840968192

163843276865536

131072262144524288

1024000

3623.933634.163629.543629.613623.383612.393597.043510.243355.973155.792769.382182.721454.56

564.03306.33159.79

81.4241.64

28.9958.15

116.15232.30463.79924.77

1841.693594.496873.04

12926.1422686.8335761.8247663.1936964.8640151.5541890.0942690.6742643.46

4597.734608.924611.474613.604602.294608.064599.134498.514056.314020.273895.453424.042684.00

879.53495.94263.20134.50

68.48

36.7873.74

147.57295.27589.09

1179.672354.764606.488307.34

16467.0431911.5756099.5587951.6157641.2765004.7768997.8770520.4170127.62

MAC Generate (CSNBMGN) – Generate Triple-DES MAC

8163264

128256512

1024204840968192

163843276865536

131072262144524288

1024000

2349.532354.022351.892350.912349.962343.772338.242303.082224.962137.131953.931641.191193.19

520.14292.75156.04

80.4241.37

18.8037.6675.26

150.46300.80600.01

1197.182358.354556.738753.71

16006.6326889.3739098.6134088.4838371.3340905.4742165.3442362.88

2701.902700.542706.392700.002702.322712.162704.212654.97

2510.22488.722444.112348.441960.60

783.23460.36252.67131.50

67.69

21.6243.2186.60

172.80345.90694.31

1384.562718.705140.97

10193.8120022.2138476.9164245.0151330.0260340.8366237.2468946.4969322.75







One Way Hash SHA-1 (CSNBOWH)

8163264

128256512

1024204840968192

163843276865536

131072262144524288

1024000

4047.674061.734058.364052.734045.934033.474024.373812.313721.623460.182990.982308.691500.68

672.83366.56191.60

97.7050.08

32.3864.99

129.87259.38517.88

1032.572060.483903.817621.88

14172.9124502.1437825.6449174.2844094.9148046.0150229.1551226.6151287.04

5351.355347.375345.675349.485359.115352.345311.994725.514713.984701.014469.593926.412941.191215.95

676.51358.75183.97

94.25

42.8185.56

171.06342.37685.97

1370.202719.744838.929654.25

19255.3536614.9164330.3796377.1179689.0988671.7894044.6896457.9896513.02


8163264

128256512

1024204840968192

163843276865536

131072262144524288

1024000

3813.563822.113821.023817.893810.843804.123639.443571.043365.583014.142471.141787.251105.97

510.66273.50141.70

71.9336.85

30.5161.15

122.27244.35487.79973.86

1863.393656.746892.72

12345.9320243.5829282.3736240.6533467.1435848.7237147.3837712.5637736.45

4925.674924.294926.664923.384913.474892.184412.844398.334397.094278.694123.673915.932596.751002.64

572.01314.79161.85

83.23

39.4178.79

157.65315.10628.93

1252.402259.374503.899005.24

17525.5533781.1564158.6885090.3765709.4774975.1582520.3184859.6885232.64








8163264

128256512

1024204840968192

163843276865536

131072262144524288

1024000

3805.843811.953812.873805.283802.553799.413633.183568.243363.983012.792469.531786.601105.87

510.45273.41141.56

71.8636.84

30.4560.99

122.01243.54486.73972.65

1860.193653.886889.45

12340.4120230.4629271.6936237.2533453.3835836.4037109.3737679.0137729.28

4932.654935.914929.974929.734907.524891.174414.224399.474390.914277.344127.133925.712597.25

996.25572.54313.15161.71

83.24

39.4678.97

157.76315.50628.16

1252.142260.084505.078992.59

17519.9933809.5064318.8385106.8865290.4475045.0182092.4984783.1485239.81


8163264

128256512

1024204840968192

163843276865536

131072262144524288

1024000

3764.473769.763757.893742.263249.542865.962316.831673.441075.73

627.46341.74178.61

91.0845.3422.8111.435.722.93

30.1260.32

120.25239.50415.94733.69

1186.221713.602203.102570.112799.552926.362984.612971.402990.152997.883001.553002.37

4381.924382.584375.004359.283710.183218.052544.721795.631129.37

648.19350.12182.20

92.7246.1423.2011.625.822.98

35.0670.12

140.00278.99474.90823.82

1302.901838.732312.952654.992868.192985.183038.253024.223041.133047.693051.363052.54








8163264

128256512

1024204840968192

163843276865536

131072262144524288

1024000

3778.023768.413767.673750.683262.562872.482320.331675.541076.22

628.01341.89178.62

91.0945.3422.8011.435.722.93

30.2260.29

120.57240.04417.61735.36

1188.011715.752204.112572.372800.792926.642984.842971.402989.492997.883002.073002.37

4399.714395.044377.334366.573718.333226.932550.551796.781129.00

647.79350.10182.16

92.7046.1523.2011.635.822.98

35.2070.32

140.07279.46475.95826.10

1305.881839.902312.202653.382868.092984.533037.693024.493041.263049.003051.883052.54

Symmetric Algorithm Encipher (CSNBSAE) – with 128-bit key

163264

128256512

1024204840968192

163843276865536

131072262144524288

1024000

3205.683205.243129.283099.193050.442957.762750.942420.531961.581411.51

897.54510.08245.77127.72

65.1132.8016.74

51.29102.57200.27396.70780.91

1514.372816.974957.258034.63

11563.1614705.3916714.4016107.1116741.4317068.9817199.7917150.98

3649.543683.813504.043518.383473.553367.733391.872834.362345.951732.171122.79

653.01312.76163.62

83.7942.3621.71

58.39117.88224.26450.35889.23

1724.283473.285804.799609.03

14189.9518395.8421397.8320497.4321446.1321965.5722208.8422231.04







Symmetric Algorithm Encipher (CSNBSAE) – with 256-bit key

163264

128256512

1024204840968192

163843276865536

131072262144524288

1024000

3208.653204.973133.053103.513052.682962.202699.742405.421933.281381.86

873.56494.48238.62123.88

63.0931.7816.22

51.34102.56200.52397.25781.49

1516.652764.544926.317918.74

11320.2514312.5216203.2815638.4616238.1216541.0216661.8716616.45

3579.313581.813541.673498.203458.113307.103171.332837.332342.691718.651127.15

652.79312.87163.55

83.7142.3321.70

57.27114.62226.67447.77885.28

1693.243247.455810.869595.67

14079.2118467.2721390.7920504.4421436.8321946.4322197.3122228.99

Digital Signature Generate (CSNDDSG) – Generate RSA signature CRT format, 17-bit exponent

512b key768b key

1024b key1280b key1536b key1786b key2048b key2304b key2560b key2816b key3072b key3328b key3584b key3840b key4096b key

1426.051239.081067.62

831.91627.37484.89348.87190.59155.18128.44104.47

82.9666.4856.6249.17

1712.131705.291631.301598.221560.121418.12

922.63357.68304.44250.38211.18167.66135.88115.65100.77

Digital Signature Verify (CSNDDSV) – Verify RSA signature CRT format, 17-bit exponent

512b key768b key


1655.551607.191557.571501.691453.671398.411339.53

636.87572.77516.75468.74425.18386.85351.92317.32

1792.791750.061722.651685.351643.171600.111573.291129.21

959.11821.63712.53620.08546.12483.19422.06







PKA Key Generate (CSNDPKG) – Generate RSA Key Pair CRT format

512b key768b key


4.7983.3212.5981.9781.6371.2651.0650.9620.7610.5930.5410.4810.4120.3170.213

4.8793.5362.7232.0731.8131.5331.3031.1160.9980.8980.8260.7590.6210.6550.467


0.00

1000.00

2000.00

3000.00

4000.00

5000.00

6000.00

7000.00

8000.00

9000.00A

PI c

alls

/sec

CPA CPE DKG EPG PEX PGN PKI PTR PVR KGN KYT RNGCrypto Functions

Crypto Functions API calls/sec (CCA Release 4.2.5)

7 host threads1 host thread


ENC DES Throughput KB/sec (CCA Release 4.2.5)

0

10000

20000

30000

40000

50000

60000

70000

80000

8 16 32 64 128

256

512

1024

2048

4096

8192

1638

4

3276

8

6553

6

1310

72

2621

44

5242

88

1024

000

3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20

2N bytes/call

KB

/ se

c


ENC DES Throughput API calls/sec (CCA Release 4.2.5)

0

500

1000

1500

2000

2500

3000

3500

4000

4500

8 16 32 64 128

256

512

1024

2048

4096

8192

1638

4

3276

8

6553

6

1310

72

2621

44

5242

88

1024

000

3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20

2N bytes/call

AP

I cal

ls/s

ec



ENC TDES Throughput API calls/sec (CCA Release 4.2.5)

0

500

1000

1500

2000

2500

3000

3500

4000

8 16 32 64 128

256

512

1024

2048

4096

8192

1638

4

3276

8

6553

6

1310

72

2621

44

5242

88

1024

000

3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20

2N bytes/call

API

cal

ls/s

ec


ENC TDES Throughput KB/sec (CCA Release 4.2.5)

0

10000

20000

30000

40000

50000

60000

70000

80000

8 16 32 64 128

256

512

1024

2048

4096

8192

1638

4

3276

8

6553

6

1310

72

2621

44

5242

88

1024

000

3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20

2N bytes/call

KB

/ se

c



DES MAC Throughput API calls/sec (CCA Release 4.2.5)

0

500

1000

1500

2000

2500

3000

3500

4000

4500

5000

8 16 32 64 128

256

512

1024

2048

4096

8192

1638

4

3276

8

6553

6

1310

72

2621

44

5242

88

1024

000

3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20

2N bytes/call

API

cal

ls/s

ec


DES MAC Throughput KB/sec (CCA Release 4.2.5)

0

10000

20000

30000

40000

50000

60000

70000

80000

90000

100000

8 16 32 64 128

256

512

1024

2048

4096

8192

1638

4

3276

8

6553

6

1310

72

2621

44

5242

88

1024

000

3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20

2N bytes/call

KB

/ se

c



TDES MAC Throughput API calls/sec (CCA Release 4.2.5)

0

500

1000

1500

2000

2500

3000

8 16 32 64 128

256

512

1024

2048

4096

8192

1638

4

3276

8

6553

6

1310

72

2621

44

5242

88

1024

000

3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20

2N bytes/call

API

cal

ls/s

ec


TDES MAC Throughput KB/sec (CCA Release 4.2.5)

0

10000

20000

30000

40000

50000

60000

70000

80000

8 16 32 64 128

256

512

1024

2048

4096

8192

1638

4

3276

8

6553

6

1310

72

2621

44

5242

88

1024

000

3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20

2N bytes/call

KB

/ se

c



SHA-1 Throughput API calls/sec (CCA Release 4.2.5)

0

1000

2000

3000

4000

5000

6000

8 16 32 64 128

256

512

1024

2048

4096

8192

1638

4

3276

8

6553

6

1310

72

2621

44

5242

88

1024

000

3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20

2N bytes/call

API

cal

ls/s

ec


SHA-1 Throughput KB/sec (CCA Release 4.2.5)

0

20000

40000

60000

80000

100000

120000

8 16 32 64 128

256

512

1024

2048

4096

8192

1638

4

3276

8

6553

6

1310

72

2621

44

5242

88

1024

000

3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20

2N bytes/call

KB

/ se

c




0

1000

2000

3000

4000

5000

6000

8 16 32 64 128

256

512

1024

2048

4096

8192

1638

4

3276

8

6553

6

1310

72

2621

44

5242

88

1024

000

3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20

2N bytes/call

API

cal

ls/s

ec



0

10000

20000

30000

40000

50000

60000

70000

80000

90000

8 16 32 64 128

256

512

1024

2048

4096

8192

1638

4

3276

8

6553

6

1310

72

2621

44

5242

88

1024

000

3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20

2N bytes/call

KB

/ se

c




0

500

1000

1500

2000

2500

3000

3500

4000

4500

5000

8 16 32 64 128

256

512

1024

2048

4096

8192

1638

4

3276

8

6553

6

1310

72

2621

44

5242

88

1024

000

3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20

2N bytes/call

API

cal

ls/s

ec

7 host threads1 host threads


0

500

1000

1500

2000

2500

3000

3500

8 16 32 64 128

256

512

1024

2048

4096

8192

1638

4

3276

8

6553

6

1310

72

2621

44

5242

88

1024

000

3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20

2N bytes/call

KB

/ se

c



SHA-512 Throughput API call/sec (CCA Release 4.2.5)

0

500

1000

1500

2000

2500

3000

3500

4000

4500

5000

8 16 32 64 128

256

512

1024

2048

4096

8192

1638

4

3276

8

6553

6

1310

72

2621

44

5242

88

1024

000

3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20

2N bytes/call

API

cal

ls/s

ec



0

500

1000

1500

2000

2500

3000

3500

8 16 32 64 128

256

512

1024

2048

4096

8192

1638

4

3276

8

6553

6

1310

72

2621

44

5242

88

1024

000

3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20

2N bytes/call

KB

/ se

c



AES 128-bit Encrypt Throughput API calls/sec (CCA Release 4.2.5)

0

500

1000

1500

2000

2500

3000

3500

4000

16 32 64 128

256

512

1024

2048

4096

8192

1638

4

3276

8

6553

6

1310

72

2621

44

5242

88

1024

000

4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20

2N bytes/call

API

cal

ls/s

ec


AES 128-bit Encrypt Throughput KB/sec (CCA Release 4.2.5)

0

5000

10000

15000

20000

25000

16 32 64 128

256

512

1024

2048

4096

8192

1638

4

3276

8

6553

6

1310

72

2621

44

5242

88

1024

000

4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20

2N bytes/call

KB

/ se

c



AES 256-bit Encrypt Throughput API calls/sec (CCA Release 4.2.5)

0

500

1000

1500

2000

2500

3000

3500

4000

16 32 64 128

256

512

1024

2048

4096

8192

1638

4

3276

8

6553

6

1310

72

2621

44

5242

88

1024

000

4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20

2N bytes/call

API

cal

ls/s

ec


AES 256-bit Encrypt Throughput KB/sec (CCA Release 4.2.5)

0

5000

10000

15000

20000

25000

16 32 64 128

256

512

1024

2048

4096

8192

1638

4

3276

8

6553

6

1310

72

2621

44

5242

88

1024

000

4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20

2N bytes/call

KB

/ se

c



DSG CRT Throughput API calls/sec (CCA Release 4.2.5)

0

200

400

600

800

1000

1200

1400

1600

1800

512 768 1024 1280 1536 1786 2048 2304 2560 2816 3072 3328 3584 3840 4096

N-bit key with 17-bit exponent

API

cal

ls/s

ec


DSV CRT Throughput API calls/sec (CCA Release 4.2.5)

0

200

400

600

800

1000

1200

1400

1600

1800

2000

512 768 1024 1280 1536 1786 2048 2304 2560 2816 3072 3328 3584 3840 4096


AP

I cal

ls/s

ec



Generate RSA Key Pair CRT Throughput API calls/sec (CCA Release 4.2.5)

0

1

2

3

4

5

6

512 768 1024 1280 1536 1786 2048 2304 2560 2816 3072 3328 3584 3840 4096


API

cal

ls/s

ec



ibm 4765 pcie performance measaurements, cca release...

Documents