You are viewing a plain text version of this content. The canonical link for it is here.
Posted to fx-dev@ws.apache.org by Fang Jian <jx...@yahoo.com> on 2005/10/13 20:32:23 UTC
ws-security speed performance
Hi,
I tested the encryption with RSA and the signature
with RSA-SHA1. It seems to me that the processing
speed is really slow. For encryption, it can take up
to 4~5 seconds to encrypt the soap message body.
Since speed performance is critical to real system. I
would like to know if there are any deployed real
systems that utilize WSS4J. How is the speed
performance? Is there any way to improve the speed
performance?
Thanks in advance,
Jian
__________________________________
Yahoo! Music Unlimited
Access over 1 million songs. Try it free.
http://music.yahoo.com/unlimited/
---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org
Re: ws-security speed performance
Posted by Davanum Srinivas <da...@gmail.com>.
Yes, that includes the time XMLSecurity is set up as well. see static
code inside some of the files like WSSConfig or WSSecurityEngine. One
way to get the time taken (w/o setup) is to execute the same snippet
of code in a loop say 5 times and ignore the first time.
-- dims
On 10/13/05, Fang Jian <jx...@yahoo.com> wrote:
> Dims,
>
> I am not working on the WSS4J source from the CVS
> repository. I pull out part of the code that is
> Axis independent and work on that part. Thus, I
> cannot use log4j to get the time. Instead, I directly
> measure the time by
>
> long runTime = System.currentTimeMillis();
> try{
> WSS4JHandler.processMessage(smc, true);
> } catch (WSSecurityException ex){
> System.out.println(ex.getStackTrace());
> }
> runTime = System.currentTimeMillis() -
> runTime;
>
> Any thing wrong with the way to calculate the time?
>
> Thanks,
>
> Jian
> --- Davanum Srinivas <da...@gmail.com> wrote:
>
> > Are u really sure? Can you switch on debug for
> > timing in
> > log4j.properties to measure the time?
> >
> > log4j.logger.org.apache.ws.security.TIME=DEBUG
> >
> > thanks,
> > dims
> >
> > On 10/13/05, Fang Jian <jx...@yahoo.com> wrote:
> > > Thanks, Dustin.
> > >
> > > Yes, I use BountyCastle provider. The time
> > includes
> > > the whole WSS4J handler processing time. The
> > following
> > > message is encrypted and signed:
> > >
> > > <soapenv:Body>
> > > <ns2:addNumbers
> > xmlns:ns2="http://jtv.com">
> > > <number1>10</number1>
> > > <number2>20</number2>
> > > </ns2:addNumbers>
> > > </soapenv:Body>
> > >
> > > It took 5281ms for my linux box (Dell latitude
> > D610)
> > > in my unit test. It seems not practical for real
> > > system design. Thus, I really like to know the
> > general
> > > speed performance of WSS4J + Apache XML security.
> > >
> > > Thanks,
> > >
> > > Jian
> > >
> > > --- Dustin Breese <du...@gmail.com> wrote:
> > >
> > > > This may be a dumb question since I'm new to the
> > > > group (and WS
> > > > security overall), but doesn't a lot depend on
> > which
> > > > JCE provider you
> > > > are using? For example, if you are using
> > > > BountyCastle or some other
> > > > provider?
> > > >
> > > > Also, does your timing include setting up the
> > > > engine? Are you
> > > > encrypting the entire SOAP body or just parts of
> > it?
> > > >
> > > > -Dustin
> > > >
> > > > On 10/13/05, Fang Jian <jx...@yahoo.com>
> > wrote:
> > > > > Hi,
> > > > >
> > > > > I tested the encryption with RSA and the
> > signature
> > > > > with RSA-SHA1. It seems to me that the
> > processing
> > > > > speed is really slow. For encryption, it can
> > take
> > > > up
> > > > > to 4~5 seconds to encrypt the soap message
> > body.
> > > > >
> > > > > Since speed performance is critical to real
> > > > system. I
> > > > > would like to know if there are any deployed
> > real
> > > > > systems that utilize WSS4J. How is the speed
> > > > > performance? Is there any way to improve the
> > speed
> > > > > performance?
> > > > >
> > > > > Thanks in advance,
> > > > >
> > > > > Jian
> > > > >
> > > > >
> > > > >
> > > > > __________________________________
> > > > > Yahoo! Music Unlimited
> > > > > Access over 1 million songs. Try it free.
> > > > > http://music.yahoo.com/unlimited/
> > > > >
> > > > >
> > > >
> > >
> >
> ---------------------------------------------------------------------
> > > > > To unsubscribe, e-mail:
> > > > wss4j-dev-unsubscribe@ws.apache.org
> > > > > For additional commands, e-mail:
> > > > wss4j-dev-help@ws.apache.org
> > > > >
> > > > >
> > > >
> > >
> > >
> > >
> > >
> > > __________________________________
> > > Yahoo! Music Unlimited
> > > Access over 1 million songs. Try it free.
> > > http://music.yahoo.com/unlimited/
> > >
> > >
> >
> ---------------------------------------------------------------------
> > > To unsubscribe, e-mail:
> > wss4j-dev-unsubscribe@ws.apache.org
> > > For additional commands, e-mail:
> > wss4j-dev-help@ws.apache.org
> > >
> > >
> >
> >
> > --
> > Davanum Srinivas : http://wso2.com/blogs/
> >
> >
> ---------------------------------------------------------------------
> > To unsubscribe, e-mail:
> > wss4j-dev-unsubscribe@ws.apache.org
> > For additional commands, e-mail:
> > wss4j-dev-help@ws.apache.org
> >
> >
>
>
>
>
>
> __________________________________
> Yahoo! Mail - PC Magazine Editors' Choice 2005
> http://mail.yahoo.com
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
> For additional commands, e-mail: wss4j-dev-help@ws.apache.org
>
>
--
Davanum Srinivas : http://wso2.com/blogs/
---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org
Re: ws-security speed performance
Posted by Davanum Srinivas <da...@gmail.com>.
Yes, that includes the time XMLSecurity is set up as well. see static
code inside some of the files like WSSConfig or WSSecurityEngine. One
way to get the time taken (w/o setup) is to execute the same snippet
of code in a loop say 5 times and ignore the first time.
-- dims
On 10/13/05, Fang Jian <jx...@yahoo.com> wrote:
> Dims,
>
> I am not working on the WSS4J source from the CVS
> repository. I pull out part of the code that is
> Axis independent and work on that part. Thus, I
> cannot use log4j to get the time. Instead, I directly
> measure the time by
>
> long runTime = System.currentTimeMillis();
> try{
> WSS4JHandler.processMessage(smc, true);
> } catch (WSSecurityException ex){
> System.out.println(ex.getStackTrace());
> }
> runTime = System.currentTimeMillis() -
> runTime;
>
> Any thing wrong with the way to calculate the time?
>
> Thanks,
>
> Jian
> --- Davanum Srinivas <da...@gmail.com> wrote:
>
> > Are u really sure? Can you switch on debug for
> > timing in
> > log4j.properties to measure the time?
> >
> > log4j.logger.org.apache.ws.security.TIME=DEBUG
> >
> > thanks,
> > dims
> >
> > On 10/13/05, Fang Jian <jx...@yahoo.com> wrote:
> > > Thanks, Dustin.
> > >
> > > Yes, I use BountyCastle provider. The time
> > includes
> > > the whole WSS4J handler processing time. The
> > following
> > > message is encrypted and signed:
> > >
> > > <soapenv:Body>
> > > <ns2:addNumbers
> > xmlns:ns2="http://jtv.com">
> > > <number1>10</number1>
> > > <number2>20</number2>
> > > </ns2:addNumbers>
> > > </soapenv:Body>
> > >
> > > It took 5281ms for my linux box (Dell latitude
> > D610)
> > > in my unit test. It seems not practical for real
> > > system design. Thus, I really like to know the
> > general
> > > speed performance of WSS4J + Apache XML security.
> > >
> > > Thanks,
> > >
> > > Jian
> > >
> > > --- Dustin Breese <du...@gmail.com> wrote:
> > >
> > > > This may be a dumb question since I'm new to the
> > > > group (and WS
> > > > security overall), but doesn't a lot depend on
> > which
> > > > JCE provider you
> > > > are using? For example, if you are using
> > > > BountyCastle or some other
> > > > provider?
> > > >
> > > > Also, does your timing include setting up the
> > > > engine? Are you
> > > > encrypting the entire SOAP body or just parts of
> > it?
> > > >
> > > > -Dustin
> > > >
> > > > On 10/13/05, Fang Jian <jx...@yahoo.com>
> > wrote:
> > > > > Hi,
> > > > >
> > > > > I tested the encryption with RSA and the
> > signature
> > > > > with RSA-SHA1. It seems to me that the
> > processing
> > > > > speed is really slow. For encryption, it can
> > take
> > > > up
> > > > > to 4~5 seconds to encrypt the soap message
> > body.
> > > > >
> > > > > Since speed performance is critical to real
> > > > system. I
> > > > > would like to know if there are any deployed
> > real
> > > > > systems that utilize WSS4J. How is the speed
> > > > > performance? Is there any way to improve the
> > speed
> > > > > performance?
> > > > >
> > > > > Thanks in advance,
> > > > >
> > > > > Jian
> > > > >
> > > > >
> > > > >
> > > > > __________________________________
> > > > > Yahoo! Music Unlimited
> > > > > Access over 1 million songs. Try it free.
> > > > > http://music.yahoo.com/unlimited/
> > > > >
> > > > >
> > > >
> > >
> >
> ---------------------------------------------------------------------
> > > > > To unsubscribe, e-mail:
> > > > wss4j-dev-unsubscribe@ws.apache.org
> > > > > For additional commands, e-mail:
> > > > wss4j-dev-help@ws.apache.org
> > > > >
> > > > >
> > > >
> > >
> > >
> > >
> > >
> > > __________________________________
> > > Yahoo! Music Unlimited
> > > Access over 1 million songs. Try it free.
> > > http://music.yahoo.com/unlimited/
> > >
> > >
> >
> ---------------------------------------------------------------------
> > > To unsubscribe, e-mail:
> > wss4j-dev-unsubscribe@ws.apache.org
> > > For additional commands, e-mail:
> > wss4j-dev-help@ws.apache.org
> > >
> > >
> >
> >
> > --
> > Davanum Srinivas : http://wso2.com/blogs/
> >
> >
> ---------------------------------------------------------------------
> > To unsubscribe, e-mail:
> > wss4j-dev-unsubscribe@ws.apache.org
> > For additional commands, e-mail:
> > wss4j-dev-help@ws.apache.org
> >
> >
>
>
>
>
>
> __________________________________
> Yahoo! Mail - PC Magazine Editors' Choice 2005
> http://mail.yahoo.com
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
> For additional commands, e-mail: wss4j-dev-help@ws.apache.org
>
>
--
Davanum Srinivas : http://wso2.com/blogs/
---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org
Re: ws-security speed performance
Posted by Fang Jian <jx...@yahoo.com>.
Dims,
I am not working on the WSS4J source from the CVS
repository. I pull out part of the code that is
Axis independent and work on that part. Thus, I
cannot use log4j to get the time. Instead, I directly
measure the time by
long runTime = System.currentTimeMillis();
try{
WSS4JHandler.processMessage(smc, true);
} catch (WSSecurityException ex){
System.out.println(ex.getStackTrace());
}
runTime = System.currentTimeMillis() -
runTime;
Any thing wrong with the way to calculate the time?
Thanks,
Jian
--- Davanum Srinivas <da...@gmail.com> wrote:
> Are u really sure? Can you switch on debug for
> timing in
> log4j.properties to measure the time?
>
> log4j.logger.org.apache.ws.security.TIME=DEBUG
>
> thanks,
> dims
>
> On 10/13/05, Fang Jian <jx...@yahoo.com> wrote:
> > Thanks, Dustin.
> >
> > Yes, I use BountyCastle provider. The time
> includes
> > the whole WSS4J handler processing time. The
> following
> > message is encrypted and signed:
> >
> > <soapenv:Body>
> > <ns2:addNumbers
> xmlns:ns2="http://jtv.com">
> > <number1>10</number1>
> > <number2>20</number2>
> > </ns2:addNumbers>
> > </soapenv:Body>
> >
> > It took 5281ms for my linux box (Dell latitude
> D610)
> > in my unit test. It seems not practical for real
> > system design. Thus, I really like to know the
> general
> > speed performance of WSS4J + Apache XML security.
> >
> > Thanks,
> >
> > Jian
> >
> > --- Dustin Breese <du...@gmail.com> wrote:
> >
> > > This may be a dumb question since I'm new to the
> > > group (and WS
> > > security overall), but doesn't a lot depend on
> which
> > > JCE provider you
> > > are using? For example, if you are using
> > > BountyCastle or some other
> > > provider?
> > >
> > > Also, does your timing include setting up the
> > > engine? Are you
> > > encrypting the entire SOAP body or just parts of
> it?
> > >
> > > -Dustin
> > >
> > > On 10/13/05, Fang Jian <jx...@yahoo.com>
> wrote:
> > > > Hi,
> > > >
> > > > I tested the encryption with RSA and the
> signature
> > > > with RSA-SHA1. It seems to me that the
> processing
> > > > speed is really slow. For encryption, it can
> take
> > > up
> > > > to 4~5 seconds to encrypt the soap message
> body.
> > > >
> > > > Since speed performance is critical to real
> > > system. I
> > > > would like to know if there are any deployed
> real
> > > > systems that utilize WSS4J. How is the speed
> > > > performance? Is there any way to improve the
> speed
> > > > performance?
> > > >
> > > > Thanks in advance,
> > > >
> > > > Jian
> > > >
> > > >
> > > >
> > > > __________________________________
> > > > Yahoo! Music Unlimited
> > > > Access over 1 million songs. Try it free.
> > > > http://music.yahoo.com/unlimited/
> > > >
> > > >
> > >
> >
>
---------------------------------------------------------------------
> > > > To unsubscribe, e-mail:
> > > wss4j-dev-unsubscribe@ws.apache.org
> > > > For additional commands, e-mail:
> > > wss4j-dev-help@ws.apache.org
> > > >
> > > >
> > >
> >
> >
> >
> >
> > __________________________________
> > Yahoo! Music Unlimited
> > Access over 1 million songs. Try it free.
> > http://music.yahoo.com/unlimited/
> >
> >
>
---------------------------------------------------------------------
> > To unsubscribe, e-mail:
> wss4j-dev-unsubscribe@ws.apache.org
> > For additional commands, e-mail:
> wss4j-dev-help@ws.apache.org
> >
> >
>
>
> --
> Davanum Srinivas : http://wso2.com/blogs/
>
>
---------------------------------------------------------------------
> To unsubscribe, e-mail:
> wss4j-dev-unsubscribe@ws.apache.org
> For additional commands, e-mail:
> wss4j-dev-help@ws.apache.org
>
>
__________________________________
Yahoo! Mail - PC Magazine Editors' Choice 2005
http://mail.yahoo.com
---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org
Re: ws-security speed performance
Posted by Fang Jian <jx...@yahoo.com>.
Dims,
I am not working on the WSS4J source from the CVS
repository. I pull out part of the code that is
Axis independent and work on that part. Thus, I
cannot use log4j to get the time. Instead, I directly
measure the time by
long runTime = System.currentTimeMillis();
try{
WSS4JHandler.processMessage(smc, true);
} catch (WSSecurityException ex){
System.out.println(ex.getStackTrace());
}
runTime = System.currentTimeMillis() -
runTime;
Any thing wrong with the way to calculate the time?
Thanks,
Jian
--- Davanum Srinivas <da...@gmail.com> wrote:
> Are u really sure? Can you switch on debug for
> timing in
> log4j.properties to measure the time?
>
> log4j.logger.org.apache.ws.security.TIME=DEBUG
>
> thanks,
> dims
>
> On 10/13/05, Fang Jian <jx...@yahoo.com> wrote:
> > Thanks, Dustin.
> >
> > Yes, I use BountyCastle provider. The time
> includes
> > the whole WSS4J handler processing time. The
> following
> > message is encrypted and signed:
> >
> > <soapenv:Body>
> > <ns2:addNumbers
> xmlns:ns2="http://jtv.com">
> > <number1>10</number1>
> > <number2>20</number2>
> > </ns2:addNumbers>
> > </soapenv:Body>
> >
> > It took 5281ms for my linux box (Dell latitude
> D610)
> > in my unit test. It seems not practical for real
> > system design. Thus, I really like to know the
> general
> > speed performance of WSS4J + Apache XML security.
> >
> > Thanks,
> >
> > Jian
> >
> > --- Dustin Breese <du...@gmail.com> wrote:
> >
> > > This may be a dumb question since I'm new to the
> > > group (and WS
> > > security overall), but doesn't a lot depend on
> which
> > > JCE provider you
> > > are using? For example, if you are using
> > > BountyCastle or some other
> > > provider?
> > >
> > > Also, does your timing include setting up the
> > > engine? Are you
> > > encrypting the entire SOAP body or just parts of
> it?
> > >
> > > -Dustin
> > >
> > > On 10/13/05, Fang Jian <jx...@yahoo.com>
> wrote:
> > > > Hi,
> > > >
> > > > I tested the encryption with RSA and the
> signature
> > > > with RSA-SHA1. It seems to me that the
> processing
> > > > speed is really slow. For encryption, it can
> take
> > > up
> > > > to 4~5 seconds to encrypt the soap message
> body.
> > > >
> > > > Since speed performance is critical to real
> > > system. I
> > > > would like to know if there are any deployed
> real
> > > > systems that utilize WSS4J. How is the speed
> > > > performance? Is there any way to improve the
> speed
> > > > performance?
> > > >
> > > > Thanks in advance,
> > > >
> > > > Jian
> > > >
> > > >
> > > >
> > > > __________________________________
> > > > Yahoo! Music Unlimited
> > > > Access over 1 million songs. Try it free.
> > > > http://music.yahoo.com/unlimited/
> > > >
> > > >
> > >
> >
>
---------------------------------------------------------------------
> > > > To unsubscribe, e-mail:
> > > wss4j-dev-unsubscribe@ws.apache.org
> > > > For additional commands, e-mail:
> > > wss4j-dev-help@ws.apache.org
> > > >
> > > >
> > >
> >
> >
> >
> >
> > __________________________________
> > Yahoo! Music Unlimited
> > Access over 1 million songs. Try it free.
> > http://music.yahoo.com/unlimited/
> >
> >
>
---------------------------------------------------------------------
> > To unsubscribe, e-mail:
> wss4j-dev-unsubscribe@ws.apache.org
> > For additional commands, e-mail:
> wss4j-dev-help@ws.apache.org
> >
> >
>
>
> --
> Davanum Srinivas : http://wso2.com/blogs/
>
>
---------------------------------------------------------------------
> To unsubscribe, e-mail:
> wss4j-dev-unsubscribe@ws.apache.org
> For additional commands, e-mail:
> wss4j-dev-help@ws.apache.org
>
>
__________________________________
Yahoo! Mail - PC Magazine Editors' Choice 2005
http://mail.yahoo.com
---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org
Re: ws-security speed performance
Posted by Davanum Srinivas <da...@gmail.com>.
Are u really sure? Can you switch on debug for timing in
log4j.properties to measure the time?
log4j.logger.org.apache.ws.security.TIME=DEBUG
thanks,
dims
On 10/13/05, Fang Jian <jx...@yahoo.com> wrote:
> Thanks, Dustin.
>
> Yes, I use BountyCastle provider. The time includes
> the whole WSS4J handler processing time. The following
> message is encrypted and signed:
>
> <soapenv:Body>
> <ns2:addNumbers xmlns:ns2="http://jtv.com">
> <number1>10</number1>
> <number2>20</number2>
> </ns2:addNumbers>
> </soapenv:Body>
>
> It took 5281ms for my linux box (Dell latitude D610)
> in my unit test. It seems not practical for real
> system design. Thus, I really like to know the general
> speed performance of WSS4J + Apache XML security.
>
> Thanks,
>
> Jian
>
> --- Dustin Breese <du...@gmail.com> wrote:
>
> > This may be a dumb question since I'm new to the
> > group (and WS
> > security overall), but doesn't a lot depend on which
> > JCE provider you
> > are using? For example, if you are using
> > BountyCastle or some other
> > provider?
> >
> > Also, does your timing include setting up the
> > engine? Are you
> > encrypting the entire SOAP body or just parts of it?
> >
> > -Dustin
> >
> > On 10/13/05, Fang Jian <jx...@yahoo.com> wrote:
> > > Hi,
> > >
> > > I tested the encryption with RSA and the signature
> > > with RSA-SHA1. It seems to me that the processing
> > > speed is really slow. For encryption, it can take
> > up
> > > to 4~5 seconds to encrypt the soap message body.
> > >
> > > Since speed performance is critical to real
> > system. I
> > > would like to know if there are any deployed real
> > > systems that utilize WSS4J. How is the speed
> > > performance? Is there any way to improve the speed
> > > performance?
> > >
> > > Thanks in advance,
> > >
> > > Jian
> > >
> > >
> > >
> > > __________________________________
> > > Yahoo! Music Unlimited
> > > Access over 1 million songs. Try it free.
> > > http://music.yahoo.com/unlimited/
> > >
> > >
> >
> ---------------------------------------------------------------------
> > > To unsubscribe, e-mail:
> > wss4j-dev-unsubscribe@ws.apache.org
> > > For additional commands, e-mail:
> > wss4j-dev-help@ws.apache.org
> > >
> > >
> >
>
>
>
>
> __________________________________
> Yahoo! Music Unlimited
> Access over 1 million songs. Try it free.
> http://music.yahoo.com/unlimited/
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
> For additional commands, e-mail: wss4j-dev-help@ws.apache.org
>
>
--
Davanum Srinivas : http://wso2.com/blogs/
---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org
Re: ws-security speed performance
Posted by Davanum Srinivas <da...@gmail.com>.
Are u really sure? Can you switch on debug for timing in
log4j.properties to measure the time?
log4j.logger.org.apache.ws.security.TIME=DEBUG
thanks,
dims
On 10/13/05, Fang Jian <jx...@yahoo.com> wrote:
> Thanks, Dustin.
>
> Yes, I use BountyCastle provider. The time includes
> the whole WSS4J handler processing time. The following
> message is encrypted and signed:
>
> <soapenv:Body>
> <ns2:addNumbers xmlns:ns2="http://jtv.com">
> <number1>10</number1>
> <number2>20</number2>
> </ns2:addNumbers>
> </soapenv:Body>
>
> It took 5281ms for my linux box (Dell latitude D610)
> in my unit test. It seems not practical for real
> system design. Thus, I really like to know the general
> speed performance of WSS4J + Apache XML security.
>
> Thanks,
>
> Jian
>
> --- Dustin Breese <du...@gmail.com> wrote:
>
> > This may be a dumb question since I'm new to the
> > group (and WS
> > security overall), but doesn't a lot depend on which
> > JCE provider you
> > are using? For example, if you are using
> > BountyCastle or some other
> > provider?
> >
> > Also, does your timing include setting up the
> > engine? Are you
> > encrypting the entire SOAP body or just parts of it?
> >
> > -Dustin
> >
> > On 10/13/05, Fang Jian <jx...@yahoo.com> wrote:
> > > Hi,
> > >
> > > I tested the encryption with RSA and the signature
> > > with RSA-SHA1. It seems to me that the processing
> > > speed is really slow. For encryption, it can take
> > up
> > > to 4~5 seconds to encrypt the soap message body.
> > >
> > > Since speed performance is critical to real
> > system. I
> > > would like to know if there are any deployed real
> > > systems that utilize WSS4J. How is the speed
> > > performance? Is there any way to improve the speed
> > > performance?
> > >
> > > Thanks in advance,
> > >
> > > Jian
> > >
> > >
> > >
> > > __________________________________
> > > Yahoo! Music Unlimited
> > > Access over 1 million songs. Try it free.
> > > http://music.yahoo.com/unlimited/
> > >
> > >
> >
> ---------------------------------------------------------------------
> > > To unsubscribe, e-mail:
> > wss4j-dev-unsubscribe@ws.apache.org
> > > For additional commands, e-mail:
> > wss4j-dev-help@ws.apache.org
> > >
> > >
> >
>
>
>
>
> __________________________________
> Yahoo! Music Unlimited
> Access over 1 million songs. Try it free.
> http://music.yahoo.com/unlimited/
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
> For additional commands, e-mail: wss4j-dev-help@ws.apache.org
>
>
--
Davanum Srinivas : http://wso2.com/blogs/
---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org
Re: ws-security speed performance
Posted by Fang Jian <jx...@yahoo.com>.
Thanks, Dustin.
Yes, I use BountyCastle provider. The time includes
the whole WSS4J handler processing time. The following
message is encrypted and signed:
<soapenv:Body>
<ns2:addNumbers xmlns:ns2="http://jtv.com">
<number1>10</number1>
<number2>20</number2>
</ns2:addNumbers>
</soapenv:Body>
It took 5281ms for my linux box (Dell latitude D610)
in my unit test. It seems not practical for real
system design. Thus, I really like to know the general
speed performance of WSS4J + Apache XML security.
Thanks,
Jian
--- Dustin Breese <du...@gmail.com> wrote:
> This may be a dumb question since I'm new to the
> group (and WS
> security overall), but doesn't a lot depend on which
> JCE provider you
> are using? For example, if you are using
> BountyCastle or some other
> provider?
>
> Also, does your timing include setting up the
> engine? Are you
> encrypting the entire SOAP body or just parts of it?
>
> -Dustin
>
> On 10/13/05, Fang Jian <jx...@yahoo.com> wrote:
> > Hi,
> >
> > I tested the encryption with RSA and the signature
> > with RSA-SHA1. It seems to me that the processing
> > speed is really slow. For encryption, it can take
> up
> > to 4~5 seconds to encrypt the soap message body.
> >
> > Since speed performance is critical to real
> system. I
> > would like to know if there are any deployed real
> > systems that utilize WSS4J. How is the speed
> > performance? Is there any way to improve the speed
> > performance?
> >
> > Thanks in advance,
> >
> > Jian
> >
> >
> >
> > __________________________________
> > Yahoo! Music Unlimited
> > Access over 1 million songs. Try it free.
> > http://music.yahoo.com/unlimited/
> >
> >
>
---------------------------------------------------------------------
> > To unsubscribe, e-mail:
> wss4j-dev-unsubscribe@ws.apache.org
> > For additional commands, e-mail:
> wss4j-dev-help@ws.apache.org
> >
> >
>
__________________________________
Yahoo! Music Unlimited
Access over 1 million songs. Try it free.
http://music.yahoo.com/unlimited/
---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org
Re: ws-security speed performance
Posted by Fang Jian <jx...@yahoo.com>.
Thanks, Dustin.
Yes, I use BountyCastle provider. The time includes
the whole WSS4J handler processing time. The following
message is encrypted and signed:
<soapenv:Body>
<ns2:addNumbers xmlns:ns2="http://jtv.com">
<number1>10</number1>
<number2>20</number2>
</ns2:addNumbers>
</soapenv:Body>
It took 5281ms for my linux box (Dell latitude D610)
in my unit test. It seems not practical for real
system design. Thus, I really like to know the general
speed performance of WSS4J + Apache XML security.
Thanks,
Jian
--- Dustin Breese <du...@gmail.com> wrote:
> This may be a dumb question since I'm new to the
> group (and WS
> security overall), but doesn't a lot depend on which
> JCE provider you
> are using? For example, if you are using
> BountyCastle or some other
> provider?
>
> Also, does your timing include setting up the
> engine? Are you
> encrypting the entire SOAP body or just parts of it?
>
> -Dustin
>
> On 10/13/05, Fang Jian <jx...@yahoo.com> wrote:
> > Hi,
> >
> > I tested the encryption with RSA and the signature
> > with RSA-SHA1. It seems to me that the processing
> > speed is really slow. For encryption, it can take
> up
> > to 4~5 seconds to encrypt the soap message body.
> >
> > Since speed performance is critical to real
> system. I
> > would like to know if there are any deployed real
> > systems that utilize WSS4J. How is the speed
> > performance? Is there any way to improve the speed
> > performance?
> >
> > Thanks in advance,
> >
> > Jian
> >
> >
> >
> > __________________________________
> > Yahoo! Music Unlimited
> > Access over 1 million songs. Try it free.
> > http://music.yahoo.com/unlimited/
> >
> >
>
---------------------------------------------------------------------
> > To unsubscribe, e-mail:
> wss4j-dev-unsubscribe@ws.apache.org
> > For additional commands, e-mail:
> wss4j-dev-help@ws.apache.org
> >
> >
>
__________________________________
Yahoo! Music Unlimited
Access over 1 million songs. Try it free.
http://music.yahoo.com/unlimited/
---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org
Re: ws-security speed performance
Posted by Dustin Breese <du...@gmail.com>.
This may be a dumb question since I'm new to the group (and WS
security overall), but doesn't a lot depend on which JCE provider you
are using? For example, if you are using BountyCastle or some other
provider?
Also, does your timing include setting up the engine? Are you
encrypting the entire SOAP body or just parts of it?
-Dustin
On 10/13/05, Fang Jian <jx...@yahoo.com> wrote:
> Hi,
>
> I tested the encryption with RSA and the signature
> with RSA-SHA1. It seems to me that the processing
> speed is really slow. For encryption, it can take up
> to 4~5 seconds to encrypt the soap message body.
>
> Since speed performance is critical to real system. I
> would like to know if there are any deployed real
> systems that utilize WSS4J. How is the speed
> performance? Is there any way to improve the speed
> performance?
>
> Thanks in advance,
>
> Jian
>
>
>
> __________________________________
> Yahoo! Music Unlimited
> Access over 1 million songs. Try it free.
> http://music.yahoo.com/unlimited/
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
> For additional commands, e-mail: wss4j-dev-help@ws.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org
Re: ws-security speed performance
Posted by Dustin Breese <du...@gmail.com>.
This may be a dumb question since I'm new to the group (and WS
security overall), but doesn't a lot depend on which JCE provider you
are using? For example, if you are using BountyCastle or some other
provider?
Also, does your timing include setting up the engine? Are you
encrypting the entire SOAP body or just parts of it?
-Dustin
On 10/13/05, Fang Jian <jx...@yahoo.com> wrote:
> Hi,
>
> I tested the encryption with RSA and the signature
> with RSA-SHA1. It seems to me that the processing
> speed is really slow. For encryption, it can take up
> to 4~5 seconds to encrypt the soap message body.
>
> Since speed performance is critical to real system. I
> would like to know if there are any deployed real
> systems that utilize WSS4J. How is the speed
> performance? Is there any way to improve the speed
> performance?
>
> Thanks in advance,
>
> Jian
>
>
>
> __________________________________
> Yahoo! Music Unlimited
> Access over 1 million songs. Try it free.
> http://music.yahoo.com/unlimited/
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
> For additional commands, e-mail: wss4j-dev-help@ws.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org