This article applies to BoKS Manager 6.7.0, 6.7.1 and 7.0.

Description

The BoKS versions of the ssh and sshd programs do not achieve the same performance as the OS native versions of ssh/sshd on x86/x86_64 architectures. Recent implementations of the x86/x86_64 architecture include hardware support for the AES crypto. The BoKS ssh/sshd programs did not utilize the hardware AES crypto to the same extent as the native ssh/sshd programs.

Resolution / Workaround

 

To resolve this issue, apply Hotfix HFBM-0110 (for BoKS Manager 6.7) or HFBM-0111 (for BoKS Manager 7.0), available for download from the HelpSystems Community Portal.

 

The BoKS ssh/sshd programs on x86/x86_64 platforms have been updated to better utilize hardware AES support if available. This is particularly noticeable for AES CTR mode ciphers, see option Ciphers in the sshd_config man page. On older x86/x86_64 hardware that does not support the AES-NI instructions the performance improvement from this hotfix is very small.

 



 

 


Still have questions? We can help. Submit a case to Technical Support.

Last Modified On: November 14, 2019