Performance of XRI DSig

[Nat Sakimura <n-sakimura@nri.co.jp>]

Hi.

To address one of my concern, I have asked my colleague to test the 
performance of the C14N.

Test a: Calculate XML DSig for 10,000 times
Test b: Calculate Signature over a string for 10,000 times.

OS: WindowsXP
CPU: Intel　Core2Quad Q9650 3.00GHz
Memory: 4GByte
Java：jdk1.6.0_12
(Tested on Eclipse)

Signature Algorithm: RSA + SHA1

[Measurement Method]
Repeat the test 10 times and take the average.

a. Take an XML DSig (javax.xml.crypto.dsig.XMLSignature) over an XML (DOM 
Structure)
 50.353sec/10000　= 0.00503 sec/sig

b. Take an Signature over an XML String (java.security.Signature)
 49.300sec/10000　=　0.00493secs/sig

So, on Java 6, impact of canonicalization is fairly small.

That's a good news.

Bad news is that the guy who did this testing told me that
when he used Java 5 with Apache library, the performance was
eight times slower. If that is true, it would be an issue.

Best,

=nat





Result: