1. Overview
This article provides an overview of general improvements in the Fortanix Data Security Manager (DSM) Accelerator 4.26 release.
2. New Features/Improvements
DSM Accelerator JCE Provider:
Added more detailed logging to DSM Accelerator JCE Provider client (JIRA: PROD-8197). For more details, refer to the Developer’s Guide: DSM Accelerator JCE Provider.
Added support for configuring retry interval (retry_for) value in DSM Accelerator JCE Provider (JIRA: PROD-7778). For more details, refer to the Developer’s Guide: DSM Accelerator JCE Provider.
Fixed retry logic in DSM Accelerator JCE Provider in case of intermittent connection breakages on the client end such as broken pipe or connection timeouts. A default retry duration of 30 seconds will be applied if not configured specifically (JIRA: PROD-8046).
DSM Accelerator PKCS#11:
Added support for configuring retry interval (retry_for) value in DSM Accelerator PKCS#11 (JIRA: PROD-7777).For more details, refer to the Developer’s Guide: DSM Accelerator PKCS#11.
3. Fortanix Data Security Manager-Accelerator Performance Statistics
3.1 Runtime Environment
NOTE
The following table lists the standard recommended runtime environment. You can choose a higher configuration for better performance.
DSM Accelerator was run in the runtime environment listed below for performance testing.
Item | Specification |
|---|---|
Number of Cores | 4 |
CPU | Intel(R) Xeon(R) CPU E5-2673 v4 @ 2.30GHz |
RAM | 2 GiB |
VM Type | Standard D4ds v4 Azure VM |
Docker Runtime Configuration |
|
3.2 DSM Accelerator Webservice
NOTE
The performance numbers below are captured with a single node; if you need higher performance or throughput, then we recommend adding multiple nodes.
Key Types and Operations | Throughput (Operations/second on a 1-node cluster) |
|---|---|
AES 256: CBC Encryption/Decryption | 17,364/18,371 |
AES 256: GCM Encryption/Decryption | 17,410/17,760 |
AES 256: FPE Encryption/Decryption | 5,613/5,604 |
3.3 Additional Modes
Key Types and Operations | Throughput (Operations/second on a 1-node cluster) |
|---|---|
AES 256: CBCNOPAD Encryption/Decryption | 17,753/17,963 |
AES 256: CFB Encryption/Decryption | 17,918/18,291 |
AES 256: CTR Encryption/Decryption | 17,797/17,961 |
AES 256: OFB Encryption/Decryption | 17,905/18,048 |
AES 256: CCM Encryption/Decryption | 17,044/17,714 |