Hello to ALL Saviours,


From past 5 days i am struggling with cryptography problem. Let me explain my problem statement.

I have to test Intel AES-NI feature on Westmere EP series processor with a JAVA Application.

My Environment Setup:-

Application server: Apache Tomcat 6.0.33
Database: Derby
Application: JPetStore
JAVA: jdk1.6.0_23
Network Security Services(NSS): 3.12.10
OS: CentOS 6.0 x86-64

Steps i have followed to make it work.

1. Setup the application running perfectly fine on 8443 port. Created a key using "keytool -genkey -alias tomcat -keyalg RSA".

2. Checked the property of page of my application. Output is "TLS 1.0, AES with 128 bit encryption (High); RSA with 1024 bit exchange".

3. I have compiled the NSS and put all *.so files into the existing JDK ($JAVA_HOME/jre/lib/amd64).

4. Update jre/lib/security/java.security AS "security.provider.1=sun.security.pkcs11.SunPK CS11 ${java.home}/lib/security/nss.cfg"

5. put nss.cfg to ($JAVA_HOME/jre/lib/security).

#Content of nss.cfg
name=NSS
nssLibraryDirectory=${java.home}/lib/amd64
nssDbMode=noDb
attributes=compatibility

6. Started the Application again. Application running fine without any error in CATALINA.out.

Problem Statement:-

I have generated a load of 20 virtual users and collected the Throughput. In both the cases (With and Without PKCS#11-NSS Implemented) i am getting same Results.

I am not sure whether i am missing some steps or done something mis-configuration.

Help is appreciated because i am in need of it badly.

Please suggest your views.