Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [performance]

How adding or changing the security policies of a system will affect the overall system performance. Note that most performance-related questions (incl. config setting of common crypto modules) are better suited for SuperUser, or ServerFault.

3
votes
1answer
135 views

Is there a security difference between GPG signing a file directly or its SHA512SUM file?

I am about to decide what SHA-512 hash sum and / or GPG verification scheme I will choose. Let me present you with two options: Signing the 25 GB ~ 23 GiB (one file fit to a Blu-Ray) directly with: ...
1
vote
2answers
91 views

Is AES-256 not the best decision for mantaining performance in a Datalake?

I'm worried about performance in a Data Lake used for Data Science purposes. I need to encrypt confidential data and, because of definitions I won't dive into here, the algorithm to fulfill this ...
0
votes
1answer
58 views

Does a cyber-attack influence the occurrence of faults?

I am looking for opinions and point of view of experienced people on this question, as I am not able to find a lot of resources. Let me define the terms first, so that we all talk about the same ...
0
votes
1answer
71 views

Measuring performance time for TLS handshake

I have this sample code to measure TLS handshake performance time. The result I get is: 3.43 ms. By repeating this for 1000 time, I get the minimum time below 1 ms. I use a device with a public IP ...
0
votes
1answer
172 views

What are the best ciphers in terms of performance for SSH tunnel?

From a security standpoint, there are few good cipher options to use with SSH, such as ChaCha20, AES 128/256 GCM/CTR. As I understand (please correct me if I wrong), all of these offer pretty strong ...
0
votes
1answer
68 views

Question about brute force performance

I just make an SHA512 brute force programs that can do 5MH/s on my i5 3.5Ghz (4 cores) which manage to use all CPU resources. If I run the program on a 2PFLOPS hpc , How many hash can it generate per ...
1
vote
2answers
351 views

Full disk encryption vs targetted partition encryption for security experts?

There are "Average Joes" answers here for "Full disk encryption vs home folder encryption". I have three use cases in the frame of professional activities with customers wanting their data secured: ...
3
votes
2answers
224 views

How can SSL improve page load times?

I just came across this statement on the CloudFlare SSL page: "Modern SSL can actually improve page load times." How can SSL improve page load times? Is there a situation where loading an HTTPS page ...
3
votes
1answer
148 views

Change from bcrypt hashes to sha1 or even plaintext, for performance

I developed an application that is similar in concept to an FTP server. There are several hundred user accounts, and it uses bcrypt to store hashed passwords. All user passwords are randomly-...
13
votes
1answer
2k views

Why is asymmetric encryption less efficient than symmetric encryption?

It's common knowledge that asymmetric encryption is in general much more expensive to compute than symmetric encryption, thus common practice is to use asymmetric encryption to establish a symmetric ...
14
votes
1answer
721 views

Is anyone seeing a performance decrease after applying recent kernel patch fixing Meltdown and Spectre? [closed]

Our company has a lot of CPU intensive operations on our servers, so the performance decrease is a concern for the organization. We did the benchmarks, and it seems that performance is almost not ...
0
votes
1answer
705 views

Can nmap undergoing host scan slow my internet speed?

I've been scanning my network for new hosts using this command: nmap -v -sn 192.168.0.0/16 10.0.0.0/8 I have a lot of users in my network. Does the nmap scan slow down my network traffic or do I ...
1
vote
3answers
2k views

Hash a list of strings in a collision-resistant way

I have a list of strings that I need to compute the hash of, but I can't figure out how to do it in a way that would be resistant to collision attacks. For example, in this python code: def ...
1
vote
2answers
701 views

Authenticate a user thru a UDP socket

so let's say I had a basic socket, doesn't give you any information about the user other than the IP address, what would be my options If I wanted to authenticate a user in the most optimal way ...
3
votes
1answer
2k views

Bitlocker - does it use hardware acceleration such as AES-NI?

I was wondering if perhaps it doesn't since enabling it slows down drive performance even on a Kabylake CPU.
1
vote
2answers
4k views

How long does RSA encryption/decryption generally take?

I am going to encrypt and decrypt a base64 that's an image. Now it needs to be fast. How fast does it take to encrypt and decrypt a file with RSA-OAEP for example? And if it is too slow what is a ...
0
votes
0answers
3k views

2048-bit vs. 4096-bit TLS cert performance difference?

Is there any difference in performance between using, say, a 2048-bit TLS cert compared to a 4096-bit one? If so, how much difference in performance could there be? If not, why use 2040- over 4096-bit ...
6
votes
2answers
1k views

What are the performance differences (for client and server) between DHE and ECDHE in TLS?

My question is about the client and server performance for (EC)DHE. I am having difficulties in understanding this picture (which is based on numbers from Ivan Ristic' book "Bulletproof SSL and TLS"). ...
0
votes
3answers
139 views

Effect of internet speed on Web App Security [closed]

I'm looking into Web App security and this question occurred to me: What could be some possible effects of internet speed on Web app security? I'm thinking of low latency, low bandwidth connections ...
-2
votes
4answers
122 views

Can SSL deployment incur performance issues [closed]

Does SSL deployment for secure server-client communication incur any performance overhead? I ask myself, why not just use HTTPS for standard web browsing when it is proven that it protects our privacy?...
2
votes
1answer
512 views

SSL benchmarking For Openssl [closed]

I have client and server code for different SSL implementations like, openssl, wolf ssl, matrix ssl and I want to benchmark these implementation based on: Influence of symmetric key generation ...
0
votes
2answers
641 views

Sending sensitive data over HTTPS and not sensitive data over HTTP?

An idea came to my mind about using encryption only for sensitive data while transferring data. Here's an example: When opening a web page you can see a lot of stuff that's accessible to other users....
6
votes
2answers
3k views

Do AES-NI instructions accelerate both AES-128 and AES-256?

I have a HW-accelerated AES processor. With that in mind, my first question would be: Do AES-NI instructions accelerate both AES-128 and AES-256 encryption / decryption? Secondly, if it is true, ...
6
votes
2answers
139 views

Will HTTPS negotiations slow down as more domains are added to the certificate?

We run a store frontend with 15 different wildcard domains (*.foo.ie, *.foo.uk etc) in the certificate. We're considering adding the root domain (foo.ie, foo.uk) into the certificate, to let the store ...
0
votes
2answers
223 views

How good using hash value of size 32 bit in practice

Suppose I want to apply an integrity check on a message sent via the Internet (to check if a message has been modified while transmission). I have the following questions: If I consider Hash value of ...
0
votes
5answers
154 views

Are users meant to hash their passwords? [duplicate]

When a user logs into their account on my server, should they send their raw data to me, and then I bcrypt compare them, or are they supposed to hash and and I directly compare? I ask this because ...
2
votes
3answers
1k views

Does the HTTPS protocol consume a lot of CPU time?

If every TLS message has to be encrypted / decrypted by both hosts involved in the secure connection, is this consuming a lot of CPU time?
4
votes
2answers
3k views

Performances of dm-crypt vs. ecryptfs [closed]

The only information I found about the difference of performance between dm-crypt (LUKS mode) and ecryptfs is that given that ecryptfs operates at filesystem-level, it may be slower when doing ...