Compare the speed of TPM operations across different TPM stacks
Apple MacBook Air M2, 24GB RAM
Go (WIP updates to github.com/google/go-tpm)
| Test Name |
Number of Commands |
Iteration Count |
Time Per Iteration |
| seal_unseal |
3 |
10000 |
243.68µs |
| pcr_extend |
1 |
10000 |
61.583µs |
| rsa_2048_create_sign_verify |
5 |
1000 |
22.137259ms |
| ecc_p256_create_sign_verify |
5 |
10000 |
1.657945ms |
C# (github.com/microsoft/TSS.MSR)
| Test Name |
Number of Commands |
Iteration Count |
Time Per Iteration |
| seal_unseal |
3 |
10000 |
1.691ms |
| pcr_extend |
1 |
10000 |
355.8µs |
| rsa_2048_create_sign_verify |
5 |
1000 |
24.773ms |
| ecc_p256_create_sign_verify |
5 |
10000 |
4.105ms |
Optimized C# (private fork)
| Test Name |
Number of Commands |
Iteration Count |
Time Per Iteration |
| seal_unseal |
3 |
10000 |
295.8µs |
| pcr_extend |
1 |
10000 |
96.8µs |
| rsa_2048_create_sign_verify |
5 |
1000 |
21.926ms |
| ecc_p256_create_sign_verify |
5 |
10000 |
1.529ms |
All versions of the tests expect a local TPM simulator running on the normal TCP
ports (2321/2322). They will Startup the TPM if needed.
- Create a primary sealed data object with auth value "password" and contents
"secrets"
- Unseal the object with its password
- Flush the object
- Extend the data "measurement" into every PCR bank's PCR 0 using
PCR_Event.
rsa_2048_create_sign_verify
- Fetch 4 bytes of randomness using
GetRandom
- Create a primary 2048-bit RSA-PSS signing key with the randomness in the
Unique field of the template
- Sign a 32-byte all-zero digest
- Validate the signature
- Flush the key
ecc_p256_create_sign_verify
- Fetch 4 bytes of randomness using
GetRandom
- Create a primary P256 ECDSA signing key with the randomness in the
Unique
field of the template
- Sign a 32-byte all-zero digest
- Validate the signature
- Flush the key
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent