Hi Andreas, I took a look at the signature check code that your profiling identified. I made a small optimization and pushed it to wip-auth that may help. ...and now I just noticed that nss_aes_operation is doing some really silly things, like copying the entire input buffer to avoid a const-cast (or iteration of the input bufferlist buffers). I'll look at that next if someone doesn't have an interest and beat me to it! sage -- To unsubscribe from this list: send the line "unsubscribe ceph-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html