Skip to main content

IBM PCI-X Cryptographic Coprocessor

Performance Measurements

The following table shows performance for selected IBM Common Cryptographic Architecture (CCA) verbs running on an IBM 4764-001 PCI-X Cryptographic Coprocessor card (4764 card) executing CCA version 3.25 software. The tests were measured from a CCA application program running on an IBM eServer xSeries 226 host server with a 3.2 GHz processor, 1.5 GB of RAM and a single 4764 card. The tests utilized the same CCA application programming interfaces (APIs) that are provided for customer application programs. The host server used to achieve the results below was running the SUSE Linux Enterprise Server 9 operating system; however similar performance results were obtained in tests run on the same host server running the Microsoft Windows 2003 operating system. No other application programs were running on the server while the tests were executing.

Performance can be affected by many factors, and IBM does not guarantee that you will achieve the same performance numbers given in this table. This information is provided 'AS IS' without warranty, express or implied. When quoting some key length or cryptographic algorithms one may not conclude that IBM implies the key length or cryptographic algorithm are adequate and can therefore be used safely. The cryptographic functions described below may not be available in all countries and may be subject to export regulations.


Function  Notes                  Calls per second
    Single-threaded
  host application
7 threads in
host application
Generate RSA digital signature (CSNDDSG) 1024-bit CRT key

2048-bit CRT key
848

316
1186

471
Verify RSA digital signature (CSNDDSV) 1024-bit key

2048-bit key
1157

976
1242

1087
Generate RSA key pair, CRT format (CSNDPKG) 1024-bit key (average rate)

2048-bit key (average rate)
2.16


0.67
2.23


0.61
Encrypt data with single-DES (CSNBENC) 1024-byte blocks


64K byte blocks


1 Megabyte blocks
1072 (1.05 MBytes/sec)

112 (7.00 MBytes/sec)

8.2 (8.02 MBytes/sec)
1138 (1.11 MBytes/sec)

125 (7.78 MBytes/sec)

8.8 (8.60 MBytes/sec)
Encrypt data with triple-DES (CSNBENC) 1024-byte blocks


64K byte blocks


1 Megabyte blocks
1036 (1.01 MBytes/sec)

110 (6.89 MBytes/sec)

8.1 (7.91 MBytes/sec)
1101 (1.08 MBytes/sec)

124 (7.73 MBytes/sec)

8.8 (8.56 MBytes/sec)
Generate single-DES MAC (CSNBMGN) 1024-byte blocks


64K byte blocks


1 Megabyte blocks
1261 (1.23 MBytes/sec)

246 (15.4 MBytes/sec)

18 (17.8 MBytes/sec)
1373 (1.34 MBytes/sec)

281 (17.6 MBytes/sec)

21 (20.3 MBytes/sec)
Generate triple-DES MAC (CSNBMGN) 1024-byte blocks


64K byte blocks


1 Megabyte blocks
833 (0.81 MBytes/sec)

223 (13.9 MBytes/sec)

18 (17.5 MBytes/sec)
870 (0.85 MBytes/sec)

251 (15.7 MBytes/sec)

20 (20.0 MBytes/sec)
SHA-1 hashing (CSNBOWH) 1024-byte blocks


64K byte blocks


1 Megabyte blocks
1449 (1.42 MBytes/sec)

298 (18.6 MBytes/sec)

22 (21.5 MBytes/sec)
1588 (1.55 MBytes/sec)

346 (21.6 MBytes/sec)

25 (24.5 MBytes/sec)
Generate DES keys (CSNBKGN)   1069 1138
Generate random numbers 8 random bytes per call 2695 3292
PIN Translate (CSNBPTR)   956 1003
Encrypt clear PIN (CSNBCPE)   1285 1384
Verify PIN (CSNBPVR)   1030 1084
Derive DES key (CSNBDKG)   733 753