1. Overview
This document provides an overview of the new features and resolved issues in the Fortanix Data Security Manager (DSM) Accelerator 4.37 release.
2. New Features and Bug Fixes
DSM Accelerator Webservice:
Added support for encryption and decryption using the RSA keys in Fortanix DSM Accelerator Webservice (JIRA: PM-395).
For more details, refer to DSM Accelerator Webservice Developer Guide.Resolved a performance issue in Fortanix DSM Accelerator Webservice for AWS Nitro, where one node in the cluster issued export requests more frequently even when the cache Time-To-Live (TTL) was configured longer (JIRA: PROD-10043).
Fixed an issue in Fortanix DSM Accelerator Webservice for AWS Nitro where, in cluster mode, it failed to export security objects if the locally cached bearer token had expired (JIRA: PROD-10051).
DSM Accelerator JCE Provider:
Added support for encryption and decryption using the RSA keys in Fortanix DSM Accelerator JCE Provider (JIRA: PM-395).
For more details, refer to DSM Accelerator JCE Provider Developer Guide.
3. Fortanix Data Security Manager Accelerator Performance Statistics
3.1 Runtime Environment
NOTE
The following table lists the standard recommended runtime environment. You can choose a higher configuration for better performance.
DSM Accelerator was run in the runtime environment listed below for performance testing.
Item | Specification |
|---|---|
Number of Cores | 4 |
CPU | Intel(R) Xeon(R) CPU E5-2673 v4 @ 2.30GHz |
RAM | 2 GiB |
VM Type | Standard D4ds v4 Azure VM |
Docker Runtime Configuration |
|
NOTE
The performance numbers below were captured with a single node. For higher performance or throughput, Fortanix recommends adding multiple nodes.
3.2 DSM Accelerator Webservice
Key Types and Operations | Throughput (Operations/second on a 1-node cluster re-using a single TLS session) |
|---|---|
AES 256: CBC Encryption/Decryption | 21,166/20,828 |
AES 256: GCM Encryption/Decryption | 22,445/22,134 |
AES 256: FPE Encryption/Decryption | 9,617/9,578 |
3.3 Additional Modes
Key Types and Operations | Throughput (Operations/second on a 1-node cluster re-using a single TLS session) |
|---|---|
AES 256: CBCNOPAD Encryption and Decryption | 22,068/21,823 |
AES 256: CFB Encryption/Decryption | 22,472/21,986 |
AES 256: CTR Encryption/Decryption | 22,491/22,017 |
AES 256: OFB Encryption/Decryption | 22,636/22,240 |
AES 256: CCM Encryption/Decryption | 22,326/22,071 |