X

Everything you want and need to know about Oracle SPARC systems performance

AES Encryption: SPARC S7 Performance, Beats Intel E5-2699 v4 Per Core Under Load

Brian Whitney
Principal Software Engineer

Oracle's cryptography benchmark measures security performance on important AES security modes. Oracle's SPARC S7 processor with its software in silicon security is faster per core than x86 servers that have the AES-NI instructions. In this test, the performance of on-processor encryption operations is measured (32 KB encryptions). Multiple threads are used to measure each processor's maximum throughput.

  • SPARC S7 processors ran 2.3 times faster per core executing AES-CFB 256-bit key encryption (in cache) than the Intel Xeon Processor E5-2699 v4 (with AES-NI).

  • SPARC S7 processors ran 2.2 times faster per core executing AES-CFB 128-bit key encryption (in cache) than the Intel Xeon Processor E5-2699 v4 (with AES-NI).

  • SPARC S7 processors ran 2.3 times faster per core executing AES-CFB 256-bit key encryption (in cache) than Intel Xeon Processor E5-2699 v3 (with AES-NI).

  • SPARC S7 processors ran 2.2 times faster per core executing AES-CFB 128-bit key encryption (in cache) than Intel Xeon Processor E5-2699 v3 (with AES-NI).

  • AES-CFB encryption is used by Oracle Database for Transparent Data Encryption (TDE) which provides security for database storage.

Oracle has also measured SHA digest performance on the SPARC S7 processor.

Performance Landscape

Presented below are results for running encryption using the AES cipher with the CFB, CBC, GCM and CCM modes for key sizes of 128, 192 and 256. Decryption performance was similar and is not presented. Results are presented as MB/sec (10**6). All SPARC S7 processor results were run as part of this benchmark effort. All other results were run during previous benchmark efforts.

Encryption Performance – AES-CFB (used by Oracle Database)

Performance is presented for in-cache AES-CFB128 mode encryption. Multiple key sizes of 256-bit, 192-bit and 128-bit are presented. The encryption was performance on 32 KB of pseudo-random data (same data for each run).

AES-CFB
Two-chip Microbenchmark Performance (MB/sec)
Processor GHz Cores Perf Perf/
Core
Software Environment
AES-256-CFB
SPARC M7 4.13 64 126,948 1,984 Oracle Solaris 11.3, libsoftcrypto + libumem
SPARC T5 3.60 32 53,794 1,681 Oracle Solaris 11.2, libsoftcrypto + libumem
Intel E5-2699 v4 2.20 44 39,034 887 Oracle Linux 7.2, IPP/AES-NI
SPARC S7 4.26 16 32,791 2,049 Oracle Solaris 11.3, libsoftcrypto + libumem
Intel E5-2699 v3 2.30 36 31,924 887 Oracle Linux 6.5, IPP/AES-NI
Intel E5-2697 v2 2.70 24 19,964 832 Oracle Linux 6.5, IPP/AES-NI
AES-192-CFB
SPARC M7 4.13 64 144,299 2,255 Oracle Solaris 11.3, libsoftcrypto + libumem
SPARC T5 3.60 32 60,736 1,898 Oracle Solaris 11.2, libsoftcrypto + libumem
Intel E5-2699 v4 2.20 44 45,351 1,031 Oracle Linux 7.2, IPP/AES-NI
Intel E5-2699 v3 2.30 36 37,157 1,032 Oracle Linux 6.5, IPP/AES-NI
SPARC S7 4.26 16 37,295 2,331 Oracle Solaris 11.3, libsoftcrypto + libumem
Intel E5-2697 v2 2.70 24 23,218 967 Oracle Linux 6.5, IPP/AES-NI
AES-128-CFB
SPARC M7 4.13 64 166,324 2,599 Oracle Solaris 11.3, libsoftcrypto + libumem
SPARC T5 3.60 32 68,691 2,147 Oracle Solaris 11.2, libsoftcrypto + libumem
Intel E5-2699 v4 2.20 44 54,179 1,231 Oracle Linux 7.2, IPP/AES-NI
Intel E5-2699 v3 2.30 36 44,388 1,233 Oracle Linux 6.5, IPP/AES-NI
SPARC S7 4.26 16 43,145 2,697 Oracle Solaris 11.3, libsoftcrypto + libumem
Intel E5-2697 v2 2.70 24 27,755 1,156 Oracle Linux 6.5, IPP/AES-NI

Encryption Performance – AES-CBC

Performance is presented for in-cache AES-CBC mode encryption. Multiple key sizes of 256-bit, 192-bit and 128-bit are presented. The encryption was performance on 32 KB of pseudo-random data (same data for each run).

AES-CBC
Two-chip Microbenchmark Performance (MB/sec)
Processor GHz Cores Perf Perf/
Core
Software Environment
AES-256-CBC
SPARC M7 4.13 64 134,278 2,098 Oracle Solaris 11.3, libsoftcrypto + libumem
SPARC T5 3.60 32 56,788 1,775 Oracle Solaris 11.2, libsoftcrypto + libumem
Intel E5-2699 v4 2.20 44 38,943 885 Oracle Linux 7.2, IPP/AES-NI
SPARC S7 4.26 16 34,733 2,171 Oracle Solaris 11.3, libsoftcrypto + libumem
Intel E5-2699 v3 2.30 36 31,894 886 Oracle Linux 6.5, IPP/AES-NI
Intel E5-2697 v2 2.70 24 19,961 832 Oracle Linux 6.5, IPP/AES-NI
AES-192-CBC
SPARC M7 4.13 64 152,961 2,390 Oracle Solaris 11.3, libsoftcrypto + libumem
SPARC T5 3.60 32 63,937 1,998 Oracle Solaris 11.2, libsoftcrypto + libumem
Intel E5-2699 v4 2.20 44 45,285 1,029 Oracle Linux 7.2, IPP/AES-NI
SPARC S7 4.26 16 39,654 2,478 Oracle Solaris 11.3, libsoftcrypto + libumem
Intel E5-2699 v3 2.30 36 37,021 1,028 Oracle Linux 6.5, IPP/AES-NI
Intel E5-2697 v2 2.70 24 23,224 968 Oracle Linux 6.5, IPP/AES-NI
AES-128-CBC
SPARC M7 4.13 64 175,151 2,737 Oracle Solaris 11.3, libsoftcrypto + libumem
SPARC T5 3.60 32 72,870 2,277 Oracle Solaris 11.2, libsoftcrypto + libumem
Intel E5-2699 v4 2.20 44 54,076 1,229 Oracle Linux 7.2, IPP/AES-NI
SPARC S7 4.26 16 46,788 2,924 Oracle Solaris 11.3, libsoftcrypto + libumem
Intel E5-2699 v3 2.30 36 44,103 1,225 Oracle Linux 6.5, IPP/AES-NI
Intel E5-2697 v2 2.70 24 27,730 1,155 Oracle Linux 6.5, IPP/AES-NI

Encryption Performance – AES-GCM (used by ZFS Filesystem)

Performance is presented for in-cache AES-GCM mode encryption with authentication. Multiple key sizes of 256-bit, 192-bit and 128-bit are presented. The encryption/authentication was performance on 32 KB of pseudo-random data (same data for each run).

AES-GCM
Two-chip Microbenchmark Performance (MB/sec)
Processor GHz Cores Perf Perf/
Core
Software Environment
AES-256-GCM
SPARC M7 4.13 64 74,221 1,160 Oracle Solaris 11.3, libsoftcrypto + libumem
SPARC T5 3.60 32 34,022 1,063 Oracle Solaris 11.2, libsoftcrypto + libumem
SPARC S7 4.26 16 20,559 1,285 Oracle Solaris 11.3, libsoftcrypto + libumem
Intel E5-2697 v2 2.70 24 15,338 639 Oracle Solaris 11.1, libsoftcrypto + libumem
AES-192-GCM
SPARC M7 4.13 64 81,448 1,273 Oracle Solaris 11.3, libsoftcrypto + libumem
SPARC T5 3.60 32 36,820 1,151 Oracle Solaris 11.2, libsoftcrypto + libumem
SPARC S7 4.26 16 22,326 1,395 Oracle Solaris 11.3, libsoftcrypto + libumem
Intel E5-2697 v2 2.70 24 15,768 637 Oracle Solaris 11.1, libsoftcrypto + libumem
AES-128-GCM
SPARC M7 4.13 64 86,223 1,347 Oracle Solaris 11.3, libsoftcrypto + libumem
SPARC T5 3.60 32 38,845 1,214 Oracle Solaris 11.2, libsoftcrypto + libumem
SPARC S7 4.26 16 23,931 1,496 Oracle Solaris 11.3, libsoftcrypto + libumem
Intel E5-2697 v2 2.70 24 16,405 684 Oracle Solaris 11.1, libsoftcrypto + libumem

Encryption Performance – AES-CCM (alternative used by ZFS Filesystem)

Performance is presented for in-cache AES-CCM mode encryption with authentication. Multiple key sizes of 256-bit, 192-bit and 128-bit are presented. The encryption/authentication was performance on 32 KB of pseudo-random data (same data for each run).

AES-CCM
Two-chip Microbenchmark Performance (MB/sec)
Processor GHz Cores Perf Perf/
Core
Software Environment
AES-256-CCM
SPARC M7 4.13 64 67,669 1,057 Oracle Solaris 11.3, libsoftcrypto + libumem
SPARC T5 3.60 32 28,909 903 Oracle Solaris 11.2, libsoftcrypto + libumem
Intel E5-2697 v2 2.70 24 19,447 810 Oracle Linux 6.5, IPP/AES-NI
SPARC S7 4.26 16 17,504 1,094 Oracle Solaris 11.3, libsoftcrypto + libumem
AES-192-CCM
SPARC M7 4.13 64 77,711 1,214 Oracle Solaris 11.3, libsoftcrypto + libumem
SPARC T5 3.60 32 33,116 1,035 Oracle Solaris 11.2, libsoftcrypto + libumem
Intel E5-2697 v2 2.70 24 22,634 943 Oracle Linux 6.5, IPP/AES-NI
SPARC S7 4.26 16 20,085 1,255 Oracle Solaris 11.3, libsoftcrypto + libumem
AES-128-CCM
SPARC M7 4.13 64 90,729 1,418 Oracle Solaris 11.3, libsoftcrypto + libumem
SPARC T5 3.60 32 38,529 1,204 Oracle Solaris 11.2, libsoftcrypto + libumem
Intel E5-2697 v2 2.70 24 26,951 1,123 Oracle Linux 6.5, IPP/AES-NI
SPARC S7 4.26 16 23,552 1,472 Oracle Solaris 11.3, libsoftcrypto + libumem

Configuration Summary

SPARC S7-2 server
2 x SPARC S7 processor, 4.26 GHz
1 TB memory
Oracle Solaris 11.3

SPARC T7-2 server
2 x SPARC M7 processor, 4.13 GHz
1 TB memory
Oracle Solaris 11.3

SPARC T5-2 server
2 x SPARC T5 processor, 3.60 GHz
512 GB memory
Oracle Solaris 11.2

Oracle Server X6-2L system
2 x Intel Xeon Processor E5-2699 v4, 2.20 GHz
256 GB memory
Oracle Linux 7.2
Intel Integrated Performance Primitives for Linux, Version 9.0 (Update 2) 17 Feb 2016

Oracle Server X5-2 system
2 x Intel Xeon Processor E5-2699 v3, 2.30 GHz
256 GB memory
Oracle Linux 6.5
Intel Integrated Performance Primitives for Linux, Version 8.2 (Update 1) 07 Nov 2014

Sun Server X4-2 system
2 x Intel Xeon Processor E5-2697 v2, 2.70 GHz
256 GB memory
Oracle Linux 6.5
Intel Integrated Performance Primitives for Linux, Version 8.2 (Update 1) 07 Nov 2014

Benchmark Description

The benchmark measures cryptographic capabilities in terms of general low-level encryption, in-cache and on-chip using various ciphers, including AES-128-CFB, AES-192-CFB, AES-256-CFB, AES-128-CBC, AES-192-CBC, AES-256-CBC, AES-128-CCM, AES-192-CCM, AES-256-CCM, AES-128-GCM, AES-192-GCM and AES-256-GCM.

The benchmark results were obtained using tests created by Oracle which use various application interfaces to perform the various ciphers. They were run using optimized libraries for each platform to obtain the best possible performance. The encryption tests were run with pseudo-random data of size 32 KB. The benchmark tests were designed to run out of cache, so memory bandwidth and latency are not the limitations.

See Also

Disclosure Statement

Copyright 2016, Oracle and/or its affiliates. All rights reserved. Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners. Results as of 6/29/2016.

Join the discussion

Comments ( 2 )
  • guest Wednesday, October 12, 2016

    What about IBMs z13 performance for TDE , w/ or w/o hardware acceleration ?


  • guest Wednesday, October 12, 2016

    Do you have a pointer to IBM Z13 performance?


Please enter your name.Please provide a valid email address.Please enter a comment.CAPTCHA challenge response provided was incorrect. Please try again.