DSM Accelerator [4.22] - October 19, 2023
1. Overview
This article provides an overview of general improvements and resolved issues in the Fortanix Data Security Manager (DSM) Accelerator 4.22 release.
2. New Features/Improvements
DSM Accelerator Webservice:
Added support for using a key name in DSM Accelerator Webservice for the cryptographic operations decrypt, sign, verify, batch sign, and batch verify (JIRA: PROD-7176). For more details, refer to Developer’s Guide: DSM Accelerator Webservice.
Added support for AWS Lambda Serverless deployment for DSM Accelerator Webservice (JIRA: PM-22). For more details, refer to Deploying DSM Accelerator Webservice on AWS Lambada
3. Bug Fixes
Fixed a null pointer exception in the DSM Accelerator JCE SDK when creating a tokenization security object (JIRA: PROD-7481).
4. Fortanix Data Security Manager Accelerator Performance Statistics
4.1 Runtime Environment
NOTE
The following table lists the standard recommended runtime environment. You can choose a higher configuration for better performance.
DSM Accelerator was run in the runtime environment listed below for performance testing.
Item | Specification |
|---|---|
Number of Cores | 4 |
CPU | Intel(R) Xeon(R) CPU E5-2673 v4 @ 2.30GHz |
RAM | 16 GiB |
Docker Runtime Configuration |
|
4.2 DSM Accelerator Webservice
NOTE
The performance numbers below are captured with a single node; if you need higher performance or throughput, then we recommend adding multiple nodes.
Key Types and Operations | Throughput (Operations/second on a 1-node cluster) |
|---|---|
AES 256: CBC Encryption/Decryption | 16,611/16,573 |
AES 256: GCM Encryption/Decryption | 16,408/16,399 |
AES 256: FPE Encryption/Decryption | 4,890/4,802 |
4.3 Additional Modes
Key Types and Operations | Throughput (Operations/second on a 1-node cluster) |
|---|---|
AES 256: CBCNOPAD Encryption/Decryption | 16,797/16.823 |
AES 256: CFB Encryption/Decryption | 16,957/16,781 |
AES 256: CTR Encryption/Decryption | 16,769/16,734 |
AES 256: OFB Encryption/Decryption | 16,897/16,663 |
AES 256: CCM Encryption/Decryption | 16,389/16,380 |