On this page

WSE: Compression, Security and Performance
TweakDotNet v0.2 Released
WSE and Attributes Evolved



The opinions expressed herein are my own personal opinions and do not represent my employer's view in any way.

RSS 2.0 | Atom 1.0 | CDF

Send mail to the author(s) E-mail

Total Posts: 83
This Year: 0
This Month: 0
This Week: 0
Comments: 5

Sign In

# Sunday, February 15, 2004
WSE: Compression, Security and Performance
Sunday, February 15, 2004 8:16:33 PM UTC ( Security | WSE )

We have been doing a lot of WSE testing at work while developing our new integration infrastructure. As a part of this project we have built a filter for message level compression in WSE.

One of the interesting things we found out while performance testing the solution was the speed increase resulting from message compression. The system we are building transfers sensitive data across the internet and we are using X509 certificates for integrity and confidentiality. Naturally, we had to apply the compression before the security mechanisms were invoked, as compressing encrypted data isn’t efficient at all. However compressing xml data is very efficient; often resulting in 80% smaller message bodies.

Having a smaller message body means that the encryption and signing process has a lot less data to deal with, and this reduced the processing time significantly. We did of course consider that the smaller payload would increase transfer performance, but on our test-setup this was not a issue.

The bottom line is that our initial testing shows that the gzip compression algorithm is faster than the encryption and signing process used by WSE. This came as a surprise to us as signing involves hashing and the encryption implementation uses a block cipher, and neither of these should have performance issues with large amounts of data; at least not compared to a compression algorithm!

This topic requires a bit more research before I can reach a conclusion, but so far I am a bit surprised. On the other hand, the results we are seeing could be related to some other part of the process like the normalization algorithm.

Having fun ;)

Comments [0] | | # 
TweakDotNet v0.2 Released
Sunday, February 15, 2004 7:40:26 PM UTC ( Tools )

I have fixed some small issues with TweakDotNet and released a new version. TweakDotNet is a small and simple program that lets you choose the default source control provider as well as edit the assembly folders used by Visual Studio.Net.

TweakDotNet v0.2 is available for download at its GotDotNet workspace.

Comments [0] | | # 
# Tuesday, February 10, 2004
WSE and Attributes Evolved
Tuesday, February 10, 2004 5:48:26 PM UTC ( WSE )

Work continues on my little WSE project. Here is a more evolved piece of sample code...

public void MySecureMethod(int x, int y)
Comments [0] | | #