Mathematics and development of fast TLS handshakes
summary
Tempesta TLS is a Linux-kernel implementation of TLS handshakes that replaces mbed TLS internals (and borrows parts of WolfSSL) to accelerate elliptic-curve asymmetric crypto, achieving ~40× faster core implementations and 40–80% more handshakes/sec than OpenSSL/Nginx with up to 4× lower latency in tests. The talk covers elliptic-curve computation hotspots, side-channel mitigations, effects of recent CPU vulnerabilities on handshakes, new fast cryptographic algorithms used by Tempesta TLS, design trade-offs between OpenSSL/WolfSSL/mbed TLS/Tempesta, and some low-level assembly optimizations.
AI-written summary · about
related talks
30mMathematics and development of fast TLS handshakes
43mMathematics and development of fast TLS handshakes
42mThe Linux network stack extension for DDoS mitigation and web security
46mLinux kernel TLS and HTTPS
53mHansel and Gretel do TLS
19mWhat's happening in TLS (transport layer security)?
20mmmTLS: Scaling the Performance of Encrypted Network Traffic Inspection
53mTempesta FW challenges, internals, use cases