Key Management Performance
The test environment for key creation, key import, and key export performance in the CipherTrust Manager REST API includes a single CipherTrust Manager virtual appliance and a multithreaded client.
Note
"Key import" and "importing a key" refers to providing key material when creating a new key.
CipherTrust Manager k570 physical appliance
CPU - 1 CPU with 4 cores
Memory - 16 GB
Hard Drive - 2 TB
Client
10Gig network
Directly connected VM on ESXi5
The representative key algorithms were AES256 for the symmetric key, and RSA2048 for the asymmetric key.
All tests were run for 180 seconds duration and repeated for different numbers of users — 10, 30, 50 users. The users that performed these operations were local users operating in the root domain.
Symmetric Key Management Operations
The key algorithm was AES256. The operations tested were creating a new key without providing key material, exporting the key, and importing a key.
Symmetric Key Results for 10 Users
The aggregated performance of all key operations was 66.2 average requests per second, with a 95th percentile response time of 340 ms.
The performance for the individual operations follows:
Key Creation: 22.1 average requests per second, 95th percentile response time 230 ms.
Key Export: 22.1 average requests per second, 95th percentile response time 490 ms.
Key Import: 22.0 average requests per second, 95th percentile response time 230 ms.
Symmetric Key Results for 30 Users
The aggregated performance of all key operations was 47.8 average requests per second, with a 95th percentile response time of 1500 ms.
The performance for the individual operations follows:
Key Creation: 16.0 average requests per second, 95th percentile response time 630 ms.
Key Export: 15.9 average requests per second, 95th percentile response time 1900 ms.
Key Import: 15.9 average requests per second, 95th percentile response time 630 ms.
Symmetric Key Results for 50 Users
The aggregated performance of all key operations was 39.6 average requests per second, with a 95th percentile response time of 3200 ms.
The performance for the individual operations follows:
Key Creation: 13.3 average requests per second, 95th percentile response time 1900 ms.
Key Export: 13.1 average requests per second, 95th percentile response time 4300 ms.
Key Import: 13.1 average requests per second, 95th percentile response time 1800 ms.
Asymmetric Key Management Operations
The key algorithm was RSA2048. The operations tested were creating a key without providing key material, exporting a public key, importing a public key, and importing a private key.
Asymmetric Key Results for 10 Users
The aggregated performance of all key import and export operations was 154.4 average requests per second, with a 95th percentile response time of 120 ms.
The performance for the individual operations follows:
Key Creation: 38.6 average requests per second, 95th percentile response time 150 ms.
Key Export: 38.6 average requests per second, 95th percentile response time 120 ms.
Public Key Import: 38.6 average requests per second, 95th percentile response time 87 ms.
Private Key Import: 38.6 average requests per second, 95th percentile response time 90 ms.
Asymmetric Key Results for 30 Users
The aggregated performance of all key operations was 184.8 average requests per second, with a 95th percentile response time of 300 ms.
The performance for the individual operations follows:
Key Creation: 46.3 average requests per second, 95th percentile response time 310 ms.
Key Export: 46.2 average requests per second, 95th percentile response time 380 ms.
Public Key Import: 46.2 average requests per second, 95th percentile response time 190 ms.
Private Key Import: 46.2 average requests per second, 95th percentile response time 180 ms.
Asymmetric Key Results for 50 Users
The aggregated performance of all key operations was 760 average requests per second, with a 95th percentile response time of 100 ms.
The performance for the individual operations follows:
Key Creation: 38.8 average requests per second, 95th percentile response time 540 ms.
Key Export: 38.7 average requests per second, 95th percentile response time 1200 ms.
Public Key Import: 38.6 average requests per second, 95th percentile response time 440 ms.
Private Key Import: 38.6 average requests per second, 95th percentile response time 440 ms.
