You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The OpenDNSSEC ods-hsmutil list command is extremely slow.
First it does a lookup of all private keys using C_FindObjects* which takes 2-3 seconds because there are over 300 of them.
Then it does a lookup of the public key corresponding to each private key using C_FindObjects* which takes 2-3 seconds per key because it goes through all of the keys again.
There doesn't appear to be a better PKCS#11 API for doing this so HSMs must be expected to have faster lookup processes, at least when a specific key ID is provided.
The list command can be improved but key access shouldn't take 2+ seconds.
The text was updated successfully, but these errors were encountered:
The OpenDNSSEC
ods-hsmutil list
command is extremely slow.First it does a lookup of all private keys using
C_FindObjects*
which takes 2-3 seconds because there are over 300 of them.Then it does a lookup of the public key corresponding to each private key using
C_FindObjects*
which takes 2-3 seconds per key because it goes through all of the keys again.There doesn't appear to be a better PKCS#11 API for doing this so HSMs must be expected to have faster lookup processes, at least when a specific key ID is provided.
The list command can be improved but key access shouldn't take 2+ seconds.
The text was updated successfully, but these errors were encountered: