[Help-gnutls] Re: gnutls_handshake() is slow and is a big lock

[Eric Leblond]

Le samedi 29 juillet 2006 à 13:50 +0200, Simon Josefsson a écrit :
> Eric Leblond <regit at inl.fr> writes:
> Hm.  Libgcrypt seem to need strong randomness for blinding purposes,
> maybe this is what stalls everything?
> 
> Try disabling blinding in libgcrypt and try again.  I.e., insert
> 'flags |= PUBKEY_FLAG_NO_BLINDING;' into cipher/rsa.c at the top of
> _gcry_rsa_decrypt().

Hmmm, it did not change a lot of thing. The only thing I saw is that
minimum time with that is less than without. But globaly performance are
the same.

BR,

> 
> > And do you think that gnutls_handshake() can be used in two
> > different threads at the same time?
> 
> If you use different gnutls_session objects in each thread, I think
> this should work.  But I haven't tested it.  Maybe you need extra
> copies of other structures too, used by the gnutls_session.
> 
> Hope this helps,
> Simon