TY - GEN
T1 - Accelerated processing of secure email by exploiting built-in security features on the Intel® EP80579 integrated processor with Intel® QuickAssist technology
AU - Keshavamurthy, Vallisha
AU - Upadhyaya, Shambhu
AU - Gopal, Vinodh
PY - 2011
Y1 - 2011
N2 - Domain Keys Identified Mail (DKIM) is one of the widely used mechanisms by which email messages can be cryptographically signed, permitting a signing domain to claim responsibility for the release of an email into the mail stream. As the volume of emails exchanged becomes large, the software implementations of DKIM using OpenSSL library will become a limiting factor of performance due to the heavy computations involved. In this largely empirical work, we identify the computation intensive modules of DKIM and solve the performance issues by implementing their functions on COTS hardware. Our approach makes use of the Intel Embedded processor Tolapai (Intel EP80579) that has several built-in cryptographic functionalities, viz. security accelerators for bulk encryption, authentication, hashing and public/private key generation and digital signing. Experimental results show that an overall 50% acceleration can be achieved by transparently migrating the DKIM functionalities to hardware.
AB - Domain Keys Identified Mail (DKIM) is one of the widely used mechanisms by which email messages can be cryptographically signed, permitting a signing domain to claim responsibility for the release of an email into the mail stream. As the volume of emails exchanged becomes large, the software implementations of DKIM using OpenSSL library will become a limiting factor of performance due to the heavy computations involved. In this largely empirical work, we identify the computation intensive modules of DKIM and solve the performance issues by implementing their functions on COTS hardware. Our approach makes use of the Intel Embedded processor Tolapai (Intel EP80579) that has several built-in cryptographic functionalities, viz. security accelerators for bulk encryption, authentication, hashing and public/private key generation and digital signing. Experimental results show that an overall 50% acceleration can be achieved by transparently migrating the DKIM functionalities to hardware.
KW - Domain Keys Identified Mail
KW - Hardware security
KW - Hashing
KW - Intel EP80579
KW - Secure email
UR - https://www.scopus.com/pages/publications/83255173901
U2 - 10.1109/SRDSW.2011.10
DO - 10.1109/SRDSW.2011.10
M3 - Conference contribution
AN - SCOPUS:83255173901
SN - 9780769544519
T3 - Proceedings of the IEEE Symposium on Reliable Distributed Systems
SP - 1
EP - 8
BT - Proceedings - 2011 30th IEEE International Symposium on Reliable Distributed Systems Workshops, SRDS 2011
T2 - 2011 30th IEEE International Symposium on Reliable Distributed Systems Workshops, SRDS 2011
Y2 - 4 October 2011 through 7 October 2011
ER -