Accelerating application-level security protocols

IEEE International Conference on Networks, ICON

Volumn , Issue , 2003, Pages 313-318

  Burnside, Matthew ^a   Keromytis, Angeles D ^a  

^a Columbia University ^*  (United States)

Author keywords

Cryptography; Operating system kernel; Sockets; SSL TLS; Zero copy

Indexed keywords

COMPUTER HARDWARE; NETWORK SECURITY;

APPLICATION LEVEL; CRYPTOGRAPHIC ACCELERATORS; CRYPTOGRAPHICS; DATA FRAMES; OPERATING SYSTEM KERNEL; PERFORMANCE; SECURITY PROTOCOLS; SOCKET; SSL/TLS; ZERO COPY;

CRYPTOGRAPHY;

EID: 33748552411     PISSN: 15566463     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/icon.2003.1266209     Document Type: Conference Paper

References (17)

1. T. Dierks and C. Allen, "The TLS protocol version 1.0," RFC 2246, Jan. 1999. [Online]. Available: ftp://ftp.isi.edu/in-notes/rfc2246.txt
2. S. Kent and R. Atkinson, "Security Architecture for the Internet Protocol," RFC 2401, Nov. 1998. [Online]. Available: ftp://ftp.isi.edu/in- notes/rfc2401.txt
3. "OC48 Analysis - Trace Data Stratified by Applications," http://www.caida.org/analysis/workload/byapplication/oc48/port.analysis%.app. xml.
4. S. Miltchev, S. Ioannidis, and A. D. Keromytis, "A Study of the Relative Costs of Network Security Protocols," in Proceedings of the USENIX Annual Technical Conference, Freenix Track, June 2002, pp. 41-48.
5. D. Boneh and N. Shacham, "Improving SSL Handshake Performance via Batching," in Proceedings of the RSA Conference, January 2001.
6. C. Coarfa, P. Druschel, and D. Wallach, "Performance Analysis of TLS Web Servers," in Proceedings of the Network and Distributed Systems Security Symposium (NDSS), February 2002.
7. A. Goldberg, R. Buff, and A. Schmitt, "Secure Web Server Performance Dramatically Improved By Caching SSL Session Keys," in Workshop on Internet Server Performance, held in conjunction with SIGMETRICS, June 1998.
8. G. Apostolopoulos, V. Peris, and D. Saha, "Transport Layer Security: How Much Does it Really Cost?" in INFOCOM: The Conference on Computer Communications, joint conference of the IEEE Computer and Communications Societies, March 1999.
9. A. D. Keromytis, J. L. Wright, and T. de Raadt, "The Design of the OpenBSD Cryptographic Framework," in Proceedings of the USENIX Technical Conference, June 2003.
10. C. B. S. and J. M. Smith, "Hardware/Software Organization of a High-Performance ATM Host Interface," IEEE Journal on Selected Areas in Communications (Special Issue on High Speed Computer/Network Interfaces), vol. 11, no. 2, pp. 240-253, February 1993.
11. J. M. Smith and C. B. S. Traw, "Giving Applications Access to Gb/s Networking," IEEE Network, vol. 7, no. 4, pp. 44-52, July 1993.
12. P. Druschel, M. B. Abbott, M. A. Pagels, and L. L. Peterson, "Network subsystem design," IEEE Network, vol. 7, no. 4, pp. 8-17, July 1993.
13. J. Kay and J, Pasquale, "The Importance of Non-Data Touching Processing Overheads in TCP/IP," in Proceedings of the ACM SIGCOMM Conference, September 1993, pp. 259-269.
14. A. G. Broscius and J. M. Smith, "Exploiting Parallelism in Hardware Implementation of the DES," in Proceedings of CRYPTO, August 1991, pp. 367-376.
15. J. M. Smith, C. B. S. Traw, and D. J. Farber, "Cryptographic Support for a Gigabit Network," in Proceedings of INET, June 1992, pp. 229-237.
16. C. Pu, H. Massalin, J. Ioannidis, and P. Metzger, "The Synthesis System," Computing Systems, vol. 1, no. 1, 1988.
17. M. Lindemann and S. W. Smith, "Improving DES Coprocessor Through-put for Short Operations," in Proceedings of the 10th USENDC Security Symposium, August 2001, pp. 67-81.