1ods-hsmspeed(1)             OpenDNSSEC ods-hsmspeed            ods-hsmspeed(1)
2
3
4

NAME

6       ods-hsmspeed - OpenDNSSEC HSM speed tester
7

SYNOPSIS

9       ods-hsmspeed [-c config] -r repository [-i iterations] [-s keysize] [-t
10       threads]
11

DESCRIPTION

13       The ods-hsmspeed utility is part of OpenDNSSEC and can be used to  test
14       the performance of the configured HSMs.
15
16       The components of OpenDNSSEC do not talk directly to the HSMs, but uses
17       an internal library called libhsm. It then  talks  to  the  HSMs  using
18       PKCS#11.  The libhsm simplifies the process of creating keys and signa‐
19       tures for the other components of OpenDNSSEC.
20
21       ods-hsmspeed will measure the speed by using  the  libhsm.  The  result
22       that  you  get  is  somewhat lower than what the manufactures promises,
23       because the libhsm creates some overhead to the pure  PKCS#11  environ‐
24       ment.
25

OPTIONS

27       -c config
28              Path to an OpenDNSSEC configuration file.
29
30              (defaults to /etc/opendnssec/conf.xml)
31
32       -i iterations
33              Specify the number of iterations for signing an RRset.  A higher
34              number of iterations will increase the performance.
35
36              (defaults to 1 iteration)
37
38       -r repository
39              The speed test will be performed on this repository.
40
41       -s keysize
42              A temporary RSA key with the given  keysize  will  be  used  for
43              signing.
44
45              (defaults to 1024 bit)
46
47       -t threads
48              The number of threads to use.  Most HSMs will be utilized better
49              with multiple threads.
50
51              (defaults to 1 thread)
52

SEE ALSO

54       ods-control(8),  ods-enforcerd(8),   ods-enforcer(8),   ods-hsmutil(1),
55       ods-kaspcheck(1),    ods-signer(8),    ods-signerd(8),   ods-timing(5),
56       ods-kasp(5), ods-hsmspeed(1), opendnssec(7), http://www.opendnssec.org/
57

AUTHORS

59       ods-hsmspeed was written by Jakob Schlyter and Nominet as part  of  the
60       OpenDNSSEC project.
61
62
63
64OpenDNSSEC                       February 2010                 ods-hsmspeed(1)
Impressum