DSM Accelerator [5.8] - July 09, 2026

1. Overview

This article provides an overview of new features in the Fortanix Data Security Manager (DSM) Accelerator 5.8 release.

2. New Features

Added PKCS#8 AES-CBC encrypted private key support to Fortanix DSM Accelerator Webservice mTLS client configuration, enabling the use of encrypted client keys for mTLS configuration (JIRA: PM-676).

For more information, refer to the DSM Accelerator Webservice Developer Guide.

3. Fortanix Data Security Manager Accelerator Performance Statistics

3.1 Runtime Environment

NOTE
The following table lists the standard recommended runtime environment. You can choose a higher configuration for better performance.
DSM Accelerator was run in the runtime environment listed below for performance testing.

Item	Specification
Number of Cores	4
CPU	Intel(R) Xeon(R) CPU E5-2673 v4 @ 2.30GHz
RAM	2 GiB
VM Type	Standard D4ds v4 Azure VM
Docker Runtime Configuration	`sudo docker run -d --network host --memory=1g --memory-swap=2g --log-driver json-file --log-opt max-size=100m`

3.2 DSM Accelerator Webservice

NOTE
The performance numbers below are captured with a single node; if you need higher performance or throughput, then Fortanix recommends adding multiple nodes.

Key Types and Operations	Throughput (Operations/second on a 1-node cluster re-using a single TLS session)
AES 256: CBC Encryption/Decryption	20,074/20,067
AES 256: GCM Encryption/Decryption	21,322/20,784
AES 256: FPE Encryption/Decryption	9,277/9,250

3.3 Additional Modes

Key Types and Operations	Throughput (Operations/second on a 1-node cluster re-using a single TLS session)
AES 256: CBCNOPAD Encryption/Decryption	21,187/20,895
AES 256: CFB Encryption/Decryption	21,270/20,824
AES 256: CTR Encryption/Decryption	21,295/20,907
AES 256: OFB Encryption/Decryption	21,330/20,941
AES 256: CCM Encryption/Decryption	21,239/20,812