1. Overview
This article provides an overview of new features, general improvements, and resolved issues in the Fortanix Data Security Manager (DSM) Accelerator 4.19 release.
2. New Features/Improvements
DSM Accelerator Webservice:
Added Guidelines to persist logs for DSM Accelerator Webservice (JIRA: PROD-5641). For more details, refer to the Administration Guide: Fortanix DSM Accelerator Webservice External logging Setup Guide.
Improved log messages for detailed logging of encryption and decryption operations in the DSM Accelerator Webservice (JIRA: PM-12).
Added support for Batch Sign and Batch Verify operations in DSM Accelerator Webservice (JIRA: PROD-6849).
For more details, refer to Developer's Guide: DSM Accelerator Webservice.
DSM Accelerator JCE Provider:
Added support for the FF1 format-preserving encryption mode for tokenization in the DSM Accelerator JCE Provider (JIRA: PROD-6869).
Improved log messages for detailed logging of encryption and decryption operations in the DSM Accelerator JCE Provider (JIRA: PM-12).
For more details, refer to Developer's Guide: DSM Accelerator JCE Provider.
NOTE
Until DSM Accelerator release 4.18, users of the DSM Accelerator JCE Provider needed to download the following:
DSM Accelerator JCE provider JAR file
Java SDK JAR file
libdsmaccelerator.so file
Starting in DSM Accelerator release 4.19, the DSM Accelerator JCE Provider and Java SDK have been consolidated into a single JAR file. So, you need to download the following:
A consolidated DSM Accelerator JAR file
libdsmaccelerator.so file
DSM Accelerator PKCS#11:
Improved log messages for detailed logging of encryption and decryption operations in the DSM Accelerator PKCS#11 (JIRA: PM-12).
3. Bug Fixes
The retry mechanism does not work as expected in the DSM Accelerator Webservice (JIRA: PROD-7068).
4. Known Issues
When the Batch Sign operation is performed for Curve Ed25519/X25519 in DSM Accelerator Webservice, the status code is showing as 500 instead of 400 (JIRA: PROD-7007).
4. Fortanix Data Security Manager-Accelerator Performance Statistics
4.1 Runtime Environment
NOTE
The following table lists the standard recommended runtime environment. You can choose a higher configuration for better performance.
DSM Accelerator was run in the runtime environment listed below for performance testing.
Item | Specification |
|---|---|
Number of Cores | 4 |
CPU | Intel(R) Xeon(R) CPU E5-2673 v4 @ 2.30GHz |
RAM | 32 GiB |
3.2 DSM Accelerator Webservice
NOTE
The performance numbers below are captured with a single node; if you need higher performance or throughput, then we recommend adding multiple nodes.
Key Types and Operations | Throughput (Operations/second on a 1-node cluster) |
|---|---|
AES 256: CBC Encryption/Decryption | 12,848/12,834 |
AES 256: GCM Encryption/Decryption | 13,228/13,235 |
AES 256: FPE Encryption/Decryption | 4,850/4,806 |
4.3 Additional Modes
Key Types and Operations | Throughput (Operations/second on a 1-node cluster) |
|---|---|
AES 256: CBCNOPAD Encryption/Decryption | 11,528/11,421 |
AES 256: CFB Encryption/Decryption | 13/491/13,458 |
AES 256: CTR Encryption/Decryption | 13,444/13,550 |
AES 256: OFB Encryption/Decryption | 13,490/12,631 |