Skip to content

Degraded performance loading BCFKS key stores with Corretto 1.8 JDK configured with bc-fips-1.0.2.3.jar #1273

Description

@jnaithani

We are observing that loading an Amazon Corretto JDK 1.8 cacerts file of type BCFKS is significantly slower when the JDK is configured with bc-fips-1.0.2.3.jar vs when it was previously configured with bc-fips-1.0.1.jar.

Approximate load times for loading the store averaged 4s with the v1.0.2.3 jar, and just over 1s with the v1.0.1. This was observed using a simple Java program that loaded a key store in memory.

What could be the reason for why the load time is significantly more when using the newer version of the BC FIPS jar?

Thank you,

-Jayesh
LoadKeyStore.txt

With v1.0.2.3.jar

Wed Nov 2 21:24:19 UTC 2022
Start: {2022-11-02 21:24:19.333}
Key store successfully loaded.
End: {2022-11-02 21:24:23.400}
Time: {4067ms}

real 0m4.150s
user 0m6.330s
sys 0m0.277s
Wed Nov 2 21:24:23 UTC 2022

with v1.0.1.jar

Wed Nov 2 21:24:08 UTC 2022
Start: {2022-11-02 21:24:08.245}
Key store successfully loaded.
End: {2022-11-02 21:24:09.304}
Time: {1059ms}

real 0m1.139s
user 0m2.760s
sys 0m0.112s
Wed Nov 2 21:24:09 UTC 2022

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions