You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
#89599 shows that accessing some CNG properties are relatively expensive to the cryptographic operation itself. That pull request memoized the result for KeySize so that reading the KeySize property doesn't incur the overhead of reading ncrypt properties, which requires an RPC call.
We should consider what other properties can be memoized for performance. #89819 showed that AlgorithmGroup is likely another candidate.
The text was updated successfully, but these errors were encountered:
Tagging subscribers to this area: @dotnet/area-system-security, @bartonjs, @vcsjones
See info in area-owners.md if you want to be subscribed.
Issue Details
#89599 shows that accessing some CNG properties are relatively expensive to the cryptographic operation itself. That pull request memoized the result for KeySize so that reading the KeySize property doesn't incur the overhead of reading ncrypt properties, which requires an RPC call.
We should consider what other properties can be memoized for performance. #89819 showed that AlgorithmGroup is likely another candidate.
I think there are times that we can see a non-"finalized" key, e.g. between PFX import and the key first use (which is why the export policy can be changed then). So the remembering part might need to be itself guarded by a semi-memoized state check on key finalization (remember yes, don't remember no).
#89599 shows that accessing some CNG properties are relatively expensive to the cryptographic operation itself. That pull request memoized the result for KeySize so that reading the KeySize property doesn't incur the overhead of reading ncrypt properties, which requires an RPC call.
We should consider what other properties can be memoized for performance. #89819 showed that
AlgorithmGroup
is likely another candidate.The text was updated successfully, but these errors were encountered: