AWS CloudHSM | Performance and capacity

Question 1

How can I request compliance reports that include CloudHSM in scope?

Performance and capacity

AWS CloudHSM | Security, Identity & Compliance

Answer 1

You can request compliance reports through your Business Development representative. If you don’t have one, you can request one here.

Question 2

How many crypto operations per second can CloudHSM perform?

Performance and capacity

AWS CloudHSM | Security, Identity & Compliance

Answer 2

The performance of the individual HSMs varies based on the specific workload. The table below shows approximate single-HSM performance for several common cryptographic algorithms. Each CloudHSM Cluster can have up to 32 HSMs, delivering up to ~32x the performance of the table listed below. Performance can vary based on exact configuration and data sizes, so we encourage load testing your application with CloudHSM to determine exact scaling needs.

RSA 2048-bit sign/verify

1,100/sec

EC P256

315 point mul/sec

AES 256

300Mb/sec full-duplex bulk encryption

2048-bit RSA Key Generation

~0.5/sec

Random Number Generation (CSPRNG)

20Mb/sec