Re: PKEY CMAC timings

[Dr Paul Dale <paul.dale@xxxxxxxxxx>]

How does it look for large input?  As in many kilobytes or megabytes?

Pauli
-- 
Dr Paul Dale | Distinguished Architect | Cryptographic Foundations 
Phone +61 7 3031 7217
Oracle Australia

On 18 Jun 2020, at 1:18 pm, Hal Murray <hmurray@xxxxxxxxxxxxxxx> wrote:

Intel(R) Core(TM) i5-3570 CPU @ 3.40GHz

After Kurt's improvement, with our usage patterns (48 bytes), PKEY mode on
3.0.0 takes 2x as many cycles as 1.1.1

That factor probably depends on how good the hardware AES support is in your
CPU.  I think it's significantly faster in newer CPU chips.

1.1.1g:
    AES-128  16 48 16    434   0.434  475ac1c053379e7dbd4ce80b87d2178e
    AES-192  24 48 16    442   0.442  c906422bfe0963de6df50e022b4aa7d4
    AES-256  32 48 16    453   0.453  991f4017858de97515260dd9ae440b06

1.1.1g improved:
    AES-128  16 48 16    230   0.230  475ac1c053379e7dbd4ce80b87d2178e
    AES-192  24 48 16    252   0.252  c906422bfe0963de6df50e022b4aa7d4
    AES-256  32 48 16    252   0.252  991f4017858de97515260dd9ae440b06

3.0.0 alpha3:
    AES-128  16 48 16    815   0.815  475ac1c053379e7dbd4ce80b87d2178e
    AES-192  24 48 16    831   0.831  c906422bfe0963de6df50e022b4aa7d4
    AES-256  32 48 16    846   0.846  991f4017858de97515260dd9ae440b06

3.0.0-alpha3 improved:
    AES-128  16 48 16    500   0.500  475ac1c053379e7dbd4ce80b87d2178e
    AES-192  24 48 16    515   0.515  c906422bfe0963de6df50e022b4aa7d4
    AES-256  32 48 16    530   0.530  991f4017858de97515260dd9ae440b06

Thanks again.


--
These are my opinions.  I hate spam.