Accelerating Application-Level Security Protocols

Burnside, Matthew Spindel; Keromytis, Angelos D.

We present a minimal extension to the BSD socket layer that can improve the performance of application-level security protocols, such as SSH or SSL/TLS, by 10%, when hardware cryptographic accelerators are available in the system. Applications specify what cryptographic transforms must be applied to incoming and outgoing data frames, and such processing is applied by the operating system itself (exploiting hardware accelerators) when the application sends or receives data. Under this scheme, we can reduce the number of system calls and context switches by 50%, and the amount of data copying by 66%. We describe our prototype implementation for the openBSD system and quantify its performance implications. We conclude with a discussion of further possible performance improvements that our approach enables.



  • thumnail for AcceleratingProtocols.pdf AcceleratingProtocols.pdf application/pdf 76.9 KB Download File

Also Published In

ICON 2003 the 11th IEEE International Conference on Networks: Sydney, Australia, September 28-October 1, 2003

More About This Work

Academic Units
Computer Science
Published Here
July 5, 2012