E-commerce applications require secure network access and almost all of these applications use SSL, a secure application layer protocol. When using SSL, a high computational demand is placed on the Web server, primarily because of the processing power required for the RSA private key operation used in cryptographic session creation. In addition, there is a computational load on the server for encrypting and decrypting sensitive communications between the server and connected clients.
The Sun Crypto Accelerator 1000 board is a PCI-based SSL accelerator board supporting Sun server platforms using the Solaris 8 Operating System. The Sun Crypto Accelerator 1000 board is a dedicated hardware co-processor solution that off-loads the SSL functions from a server's CPU, thereby freeing the CPU to perform other tasks and increasing the processing speed for secure transactions.
By implementing an integrated solution using Sun server hardware, Sun's SunONE Web Server software, and the Sun Crypto Accelerator 1000 board, Web server and SSL-centric environments can gain high levels of performance. The Sun Crypto Accelerator 1000 board is optimized to efficiently perform specific SSL mathematical functions, leaving the system processor to focus on its core strength of application processing. Because the board and SunONE Web Server both support virtual server technology, customers can even further fine-tune use of processor resources to gain the greatest performance and cost efficiencies.
The Sun Crypto Accelerator 1000 board is an ideal solution for businesses that need to handle more simultaneous transactions, increase reliability, and optimize performance based on authentication loads. The Sun Crypto Accelerator 1000 enables more cost-effective capacity planning as encrypted network traffic requirements grow.
The PCI-based Sun[tm] Crypto Accelerator 1000 board significantly speeds up secure, encrypted Web transactions on Sun servers running SunONE[tm] Web Server software or Apache Web server software. The accelerator board supports the Netscape NSS/PKCS 11 interface and OpenSSL* 0.9.6b.
* This product includes software developed by the OpenSSL project for use in the OpenSSL Toolkit. This product includes cryptographic software written by Eric Young. This product includes software developed by Ralf S. Engelschall for use in the mod_ssl project.
Supported Platforms
:
Scalable to four boards on applicable Sun Fire[tm] servers, supporting dynamic reconfiguration of dynamic system domains and high availability.
Cryptographic Functions
:
Asymmetric:
RSA 1024-bit private key with CRT - over 4000 operations per second
RSA public key with CRT key lengths of 512-bit to 2048-bit
DSA 1024-bit public key, 160 private key with up to 5400 operations per second
Modular exponentiation functions, including D-H, DSA, RSA, and raw modular exponentiation
Symmetric:
3DES bulk encryption of up to 500 Mbps. This benchmark applies only to Apache installations
Hardware Random Numbers: True random number generation of up to 125 Kbps
