tree 6cb17a1f77a2b168b35a6cf3a130f5b741bd7c01
parent 5381e1a25e4c088fe5d73624ef4ff26642dd53e6
author Asim Shankar <ashankar@google.com> 1405648799 -0700
committer Asim Shankar <ashankar@google.com> 1405648799 -0700

veyron/runtimes/google/ipc/stream/crypto: Add benchmarks for connection
setup.

This commit only adds the benchmarks and make a strong case for using nacl/box
as the encryption layer since by avoiding unnecessary certification
verification, the handshake time improves by 140x on my desktop and 10x on the
raspberry pi.

The benchmarks demonstrate (and mimic real-world usage) that connection setup
to a Pi takes 3 seconds with the current code and can be improved to 200ms
using the box crypter.

I also tried the TLS benchmarks using an ECDSA certificate and the
ECDHE_ECDSA_WITH_RC4_128_SHA cipher suite instead of an RSA certificate
with TLS_ECDHE_RSA_WITH_RC4_128_SHA. Switching to ECDSA certificates
also improves time considerably, but really we need to figure out
a way to avoid certificate verification (especially since we do not
place any faith in these certificates). Either by switching to box
or by using TLS_DH_anon_* or some family of cipher suites in TLS.

Benchmark summary:
Desktop (Intel Xeon 3.2Ghz)
                     us-per-handshake  speedup
TLS with RSA keys     32938             1x (baseline)
TLS with ECDSA keys    8143             4x
Box                     223             147x

Raspberri Pi          ms-per-handshake  speedup
TLS with RSA keys     2856              1x (baseline)
TLS with ECDSA keys    739              3x
Box                    290              10x

Change-Id: Icb60a3cc1be33ff63c3b2a0562fbf18feff38753