1. Overview
This article provides an overview of the new features and enhancements in the Fortanix Data Security Manager (DSM) Accelerator 5.2 release.
2. New Features
DSM Accelerator EKM:
Added Fortanix DSM Accelerator support for Extensible Key Management (EKM) client (JIRA: PM-443).
For more information, refer to the following:
3. Improvements
DSM Accelerator Webservice:
Fortanix DSM Accelerator Webservice for Nitro with Fortanix Confidential Computing Manager (CCM) now automatically detects and applies newly renewed CCM certificates, eliminating the need for manual restarts (JIRA: PM-510).
4. Fortanix Data Security Manager Accelerator Performance Statistics
4.1 Runtime Environment
NOTE
The following table lists the standard recommended runtime environment. You can choose a higher configuration for better performance.
DSM Accelerator was run in the runtime environment listed below for performance testing.
Item | Specification |
|---|---|
Number of Cores | 4 |
CPU | Intel(R) Xeon(R) CPU E5-2673 v4 @ 2.30GHz |
RAM | 2 GiB |
VM Type | Standard D4ds v4 Azure VM |
Docker Runtime Configuration |
|
4.2 DSM Accelerator Webservice
NOTE
The performance numbers below are captured with a single node; if you need higher performance or throughput, then Fortanix recommends adding multiple nodes.
Key Types and Operations | Throughput (Operations/second on a 1-node cluster re-using a single TLS session) |
|---|---|
AES 256: CBC Encryption/Decryption | 20,695/20,439 |
AES 256: GCM Encryption/Decryption | 21,773/21,604 |
AES 256: FPE Encryption/Decryption | 9,448/9,406 |
4.3 Additional Modes
Key Types and Operations | Throughput (Operations/second on a 1-node cluster re-using a single TLS session) |
|---|---|
AES 256: CBCNOPAD Encryption/Decryption | 21,770/21,684 |
AES 256: CFB Encryption/Decryption | 21,599/21,312 |
AES 256: CTR Encryption/Decryption | 21,750/21,192 |
AES 256: OFB Encryption/Decryption | 21,826/21,647 |
AES 256: CCM Encryption/Decryption | 21,465/21,079 |