Skip to content

Commit

Permalink
Openssl no longer has much better performance
Browse files Browse the repository at this point in the history
https: //www.oracle.com/java/technologies/javase/8-whats-new.html "Hardware intrinsics were added to use Advanced Encryption Standard (AES)."
https: //openjdk.org/jeps/164 "JEP 164: Leverage CPU Instructions for AES Cryptography"
https: //docs.oracle.com/javase/9/whatsnew/#d1373e94 "Improves performance ranging from 34x to 150x for AES/GCM/NoPadding"
https: //openjdk.org/jeps/246 "JEP 246: Leverage CPU Instructions for GHASH and RSA"
Signed-off-by: Julian Ladisch <julianladisch@users.noreply.github.com>
  • Loading branch information
julianladisch authored and vietj committed Feb 28, 2023
1 parent 8d85845 commit 782f658
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion src/main/asciidoc/net.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -721,7 +721,8 @@ NOTE: TLS 1.0 (TLSv1) and TLS 1.1 (TLSv1.1) are widely deprecated and have been
==== SSL engine

The engine implementation can be configured to use https://www.openssl.org[OpenSSL] instead of the JDK implementation.
OpenSSL provides better performances and CPU usage than the JDK engine, as well as JDK version independence.
Before JDK started to use hardware intrinsics (CPU instructions) for AES in Java 8 and for RSA in Java 9,
OpenSSL provided much better performances and CPU usage than the JDK engine.

The engine options to use is

Expand Down

0 comments on commit 782f658

Please sign in to comment.