Yubico are developing an HSM at the moment, I have no idea what the performance is like but you could probably ask: http://www.yubico.com/YubiHSM-Application -Nick On Tue, Apr 5, 2011 at 10:15 AM, Nick Jenkin wrote:

Yubico are developing an HSM at the moment, I have no idea what the performance is like but you could probably ask:

http://www.yubico.com/YubiHSM-Application

-Nick

On Tue, Apr 5, 2011 at 9:24 AM, Jay Daley wrote:

...

A software HSM can normally only do around 5k - 6k 1024 RSA sigs per second:

http://trac.opendnssec.org/wiki/SoftHSM/Performance

I want multiple cards in a machine to do 40k+

Jay

On 5/04/2011, at 10:37 AM, Gerard Creamer wrote:

...

Or if you don't actually need a hardware solution, you could run up an HSM simulator (like http://thalessim.codeplex.com/) on faster gear than the real HSM has and get performance that way.

On 5/04/2011 10:22 a.m., Gerard Creamer wrote:

...

The HSM space seems to be very tightly controlled.  We've been looking for affordable solutions for PIN block decryption for our payments work and the options seem to be very limited (and expensive and slow).  We've asked around in the payments space here and in Australia and the answer is always 'buy an HSM from one of these two places' and for attaining more throughput it is invariably 'buy more HSMs'.  I think they like it being a black box solution, that way they can claim it's secure.

If you do find anything I would be very interested in getting the details from you.

Cheers, Gerard

On 5/04/2011 10:13 a.m., Richard Nelson wrote:

...

There has been some work on doing crypto acceleration on GPUs recently, mainly SSL which is not quite what you are looking for I guess.

http://shader.kaist.edu/sslshader/

Richard.

On 05/04/11 09:50, Jay Daley wrote:

...

Hi

Is there anyone out there, academics perhaps, developing new crypto accelerator/HSM hardware with a focus on high performance (e.g. 10k+ RSA sigs per second)?  The current market is pretty poor with largely over-priced and under-performing kit and I'm hoping that someone is plotting to revolutionise it with something new and looking for a partner.

cheers Jay

_______________________________________________

_______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

-- Jay Daley Chief Executive .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 931 6977 mobile: +64 21 678840

_______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog