Academic Commons

Articles

Accelerating Application-Level Security Protocols

Burnside, Matthew Spindel; Keromytis, Angelos D.

We present a minimal extension to the BSD socket layer that can improve the performance of application-level security protocols, such as SSH or SSL/TLS, by 10%, when hardware cryptographic accelerators are available in the system. Applications specify what cryptographic transforms must be applied to incoming and outgoing data frames, and such processing is applied by the operating system itself (exploiting hardware accelerators) when the application sends or receives data. Under this scheme, we can reduce the number of system calls and context switches by 50%, and the amount of data copying by 66%. We describe our prototype implementation for the openBSD system and quantify its performance implications. We conclude with a discussion of further possible performance improvements that our approach enables.

Subjects

Files

  • thumnail for AcceleratingProtocols.pdf AcceleratingProtocols.pdf application/pdf 76.9 KB Download File

Also Published In

Title
ICON 2003 the 11th IEEE International Conference on Networks: Sydney, Australia, September 28-October 1, 2003
DOI
https://doi.org/10.1109/ICON.2003.1266209

More About This Work

Academic Units
Computer Science
Publisher
IEEE
Published Here
July 5, 2012
Academic Commons provides global access to research and scholarship produced at Columbia University, Barnard College, Teachers College, Union Theological Seminary and Jewish Theological Seminary. Academic Commons is managed by the Columbia University Libraries.