Top Banner
Securing memcache or, Tales from Encryption
20

Securing memcache or, Tales from Encryption

Feb 03, 2022

Download

Documents

dariahiddleston
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: Securing memcache or, Tales from Encryption

Securing memcache or, Tales from Encryption

Page 2: Securing memcache or, Tales from Encryption

What's memcache?

Page 3: Securing memcache or, Tales from Encryption

Who’s big idea?

Page 4: Securing memcache or, Tales from Encryption

Why secure memcache?

•  SASL authenticates •  yaSSL also encrypts

Page 5: Securing memcache or, Tales from Encryption

Who cares?

•  Policy enforcement •  Sensitive Data •  Masking Data behind firewall

Page 6: Securing memcache or, Tales from Encryption

The Cloud Cares

Page 7: Securing memcache or, Tales from Encryption

How do I use it?

-T

Page 8: Securing memcache or, Tales from Encryption

When is it available?

•  Beta now

Page 9: Securing memcache or, Tales from Encryption

How it works

Tcp/ip

CyaSSL

N Clients N Servers

Tcp/IP

CyaSSL

memcache client Encrypted via streaming cipher

Tcp/IP

memcached

Page 10: Securing memcache or, Tales from Encryption

What's the Cost?

Page 11: Securing memcache or, Tales from Encryption

Database Performance

Page 12: Securing memcache or, Tales from Encryption

memcache Performance

Page 13: Securing memcache or, Tales from Encryption

AES-256 Performance

Page 14: Securing memcache or, Tales from Encryption

Stream RC4 Performance

Page 15: Securing memcache or, Tales from Encryption

HC-128 Performance

Page 16: Securing memcache or, Tales from Encryption

MD5 HC-128 Performance

Page 17: Securing memcache or, Tales from Encryption

Future Performance Directions

AES-NI

Hardware offloading

Page 18: Securing memcache or, Tales from Encryption

Alice

Bob

Page 19: Securing memcache or, Tales from Encryption
Page 20: Securing memcache or, Tales from Encryption

Thanks!

Todd Ouska [email protected] www.yassl.com Open Source Embedded SSL Libraries