Skip to content
This repository has been archived by the owner on Jan 20, 2022. It is now read-only.

MbedTLS uses small internal buffers for encryption #2471

Open
boryspoplawski opened this issue Jun 22, 2021 · 1 comment
Open

MbedTLS uses small internal buffers for encryption #2471

boryspoplawski opened this issue Jun 22, 2021 · 1 comment

Comments

@boryspoplawski
Copy link
Contributor

Description of the problem

When using encrypted pipes (e.g. to send checkpoint) MbedTLS has to encrypt the data and uses 4 pages buffer for that. This might drastically reduce fork performance in case of big enclaves.

Proposed solution (needs performance improvement verification):
set MbedTLS buffer size (hopefully possible) to some grater value, probably tied to enclave size (e.g. we would have 3 different sizes depending on the enclave size).

@dimakuv
Copy link

dimakuv commented Jul 22, 2021

Looks like a simple performance optimization, but someone will need to do thorough performance analysis of this change. Doesn't seem too important at the moment, so assigning low priority.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

2 participants