Anatomy and Performance of SSL Processing

A wide spectrum of e-commerce (B2B/B2C), banking, financial trading and other business applications require the exchange of data to be highly secure. The Secure Sockets Layer (SSL) protocol provides the essential ingredients of secure communications – privacy, integrity and authentication. Though it is wellunderstood that security always comes at the cost of performance, these costs depend on the cryptographic algorithms. In this paper, we present a detailed description of the anatomy of a secure session. We analyze the time spent on the various cryptographic operations (symmetric, asymmetric and hashing) during the session negotiation and data transfer. We then analyze the most frequently used cryptographic algorithms (RSA, AES, DES, 3DES, RC4, MD5 and SHA-1). We determine the key components of these algorithms (setting up key schedules, encryption rounds, substitutions, permutations, etc) and determine where most of the time is spent. We also provide an architectural analysis of t...

• Type: Conference
• Year: 2005
• Where: ISPASS
• Authors: Li Zhao, Ravi R. Iyer, Srihari Makineni, Laxmi N. Bhuyan
• Keywords: Cryptographic Algorithms, ISPASS 2005, Secure Sockets Layer, Software Engineering, SSL Performance