1 Reply Latest reply on Mar 2, 2009 12:48 PM by mshults99

    What acceleration methods, if any, do you use for SSL, IPSEC, and e-mail encryption?


      Are you using add-in cards at all, or just relying on software?


      If you're using add-in cards today, how much faster would driver software running on the Intel server platform have to be in order to deliver an equivalent level of performance?


      If you're running these protocols using software-only implementations, what's your experience in terms of CPU consumption and delivered performance?


      As you look ahead to virtualization-based consolidation, are you concerned at all about the resources being consumed by encryption/decryption in software?  If so, have you looked into the virtualize-ability of add-in cryptographic accelerators?


      Is there a 'quantum' level of performance for encrypt/decrypt operations within these protocols beyond which further performance improvement isn't useful, or is is continuous improvement valuable?


      Thanks.  It's no secret that Intel is always thinking about cryptographic enhancements to our platforms.  Your feedback to the above would be very helpful in this context.

        • 1. Follow-up - document encryption

          Wondering how extensively IPIP members are using document encryption methods, especially in these days of increased concern about inadvertent disclosure and laptop thefts.


          Do you have a policy regarding document and e-mail encryption?  How do your tools support that policy?  How important to you is encryption/decryption performance in terms of adherence to the policy?  In other words, have you seen situations where users avoid following the policy because the performance delays associated with following are unacceptable to them?


          Hardware is rapidly becoming more and more capable in terms of accelerating the fundamental cryptographic primitives that make all of this stuff work.  In your experience, is the rest of the 'stack' (drivers, tools, etc.) keeping pace?  What could Intel be doing to help move things along so our hardware efforts can actually benefit you directly?