sRDMA -- Efficient NIC-based Authentication and Encryption for Remote Direct Memory
summary
Proposes sRDMA: symmetric‑crypto RDMA with cryptographic work moved onto the NIC, implemented on a Broadcom Stingray ePS225 smartNIC (8‑core ARM, 8 GB DRAM) that performs AES and Poly1305 operations in hardware. Changes: three transport header bits signal a MAC, 24‑bit on‑wire packet sequence reconstructs a 64‑bit counter, and a protection domain key derivation lets the NIC store one domain key and derive per‑qpair keys on the fly. Measured overhead is ~1 µs per side for header auth, full RTT baseline 18 µs, and near‑line 20.6 Gbps for large transfers; Poly1305 wins for packet auth, AES for authenticated encryption.
AI-written summary · about
chapters (8)
- 0:00Intro
- 1:03RDMA security considerations
- 4:13Base Transport Header (BTH)
- 4:50Nonce and Packet Sequence Number (PSN)
- 14:20Evaluation - Source authentication latency
- 17:07Evaluation - Packet authentication latency
- 19:26Evaluation - Write Bandwidth
- 22:15Evaluation - Read Bandwidth Write Bandwidth
related talks
17mSRNIC: A Scalable Architecture for RDMA NICs
14mUnderstanding RDMA Microarchitecture Resources for Performance Isolation
15mSecuring RDMA for High-Performance Datacenter Storage Systems
12mPreview: Networking
28mPersistent Memory plus RDMA, new age remote device
18mRDMA is Turing complete, we just did not know it yet!
16mOneSidedMW: Managing Disaggregated Memory Efficiently, Flexibly, and Securely with RNIC
18mFileMR: Rethinking RDMA Networking for Scalable Persistent Memory