Explore a 43-minute conference talk from linux.conf.au 2021 that delves into the mathematics and development of fast TLS handshakes. Learn about Tempesta TLS, an implementation for the Linux kernel that focuses on asymmetric cryptography and elliptic curves. Discover how this implementation achieves 40-80% more TLS handshakes per second than OpenSSL/Nginx with up to 4x lower latency. Gain insights into elliptic curve computations, side channel attacks, CPU vulnerabilities affecting TLS handshakes, and new fast algorithms. Compare design trade-offs between OpenSSL, WolfSSL, mbed TLS, and Tempesta TLS. Examine assembly code examples and understand the fundamentals of efficient TLS handshake implementation in the Linux kernel.
Overview
Syllabus
Introduction
Brief introduction
Brief introduction of the product
Performance
Benchmark tools
Demo
Data comparison
Why Tempest is faster
Elliptic curves
Multiplication inelliptic curve
Coordinate systems
Multiplication and squaring
Montgomery reduction
Example
Security
Memory usage
Big integers
Assembly implementation
Performance enhancement
Linux kernel
Problems
QA
Taught by
linux.conf.au
