Re: [Ejbca-develop] cryptoaccelerators

[Tomas G. <to...@pr...>]

Hmm, the only thing I find in the internet about HIFN-7956 describes an 
integrated circuit. If you manage to make it accessible to software 
using a decent PKCS#11 driver, it should be possible to use it :-)

Seriously, all EJBCA needs is a decent PKCS#11 driver (whatever that 
means of course). I haven't heard of HIFN-7956 before though.

Reliefing system load for issuing certificates really is only needed if 
you plan to issue many many millions of certificates in short time. 
Using an HSM is not that much faster actually, but it's more secure. The 
largest use case for HSM on a CA is security/audit compliance, and not 
performance.

But perhaps you have a use case where you need to issue hundreds of 
millions of certificates in a few days?

Cheers,
Tomas

On 01/06/2014 08:26 AM, Hans Witvliet wrote:
> Hi all,
>
> Perhaps someone on the list can comment on it:
>
> Next week or so i can retrieve some HIFN-7956 crypto accelerators.
> They were intended to be used for VPN's, but i wonder if they can also
> be used (relief system load) when creating a batch of certificates.
>
>
> Hans
>
> ------------------------------------------------------------------------------
> Rapidly troubleshoot problems before they affect your business. Most IT
> organizations don't have a clear picture of how application performance
> affects their revenue. With AppDynamics, you get 100% visibility into your
> Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro!
> http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>