patch: isolate a pkcs11 module

Nikos Mavrogiannopoulos nmav at redhat.com
Mon Nov 3 04:09:29 PST 2014


The attached patch allows to use p11-kit to run and use an isolated PKCS
#11 module. The performance cost seems to be quite limited. I've tested
it with softhsm (isolated) + lighttpd2 and a pseudo-benchmark (run in
the same pc) shows:

softhsm:
TRAFFIC: 63450 avg bytes, 235 avg overhead, 634500000 bytes, 2350000
overhead
TIMING:  33.201 seconds, 301 rps, 18731 kbps, 13.3 ms avg req time

direct:
TRAFFIC: 63450 avg bytes, 235 avg overhead, 634500000 bytes, 2350000
overhead
TIMING:  29.981 seconds, 333 rps, 20743 kbps, 12.0 ms avg req time

regards,
Nikos

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Added-the-ability-to-use-a-PKCS-11-server-process-vi.patch
Type: text/x-patch
Size: 42132 bytes
Desc: not available
URL: <http://lists.freedesktop.org/archives/p11-glue/attachments/20141103/d44a9673/attachment-0001.bin>


More information about the p11-glue mailing list