Closed Bug 1915439 Opened 1 year ago Closed 1 year ago

NSC_FindObjectsInit should skip search over sessObjHashTable if template includes a {CKA_TOKEN: CK_TRUE} attribute

Categories

(NSS :: Libraries, enhancement, P3)

enhancement

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: jschanck, Assigned: jschanck)

Details

Attachments

(1 file)

When profiling Firefox, I see that calls to nssTrustDomain_FindTrustForCertificate spend a significant amount of time in a call to sftk_searchObjectList(..., slot->sessObjHashTable, ...) in NSC_FindObjectsInit. This search is specifically asking for token objects---the template includes {CKA_TOKEN: CK_TRUE}---so nothing in sessObjHashTable will match. We should skip this call to sftk_searchObjectList in token-only searches.

Attachment #9421336 - Attachment description: Bug 1915439 - improve performance of NSC_FindObjectsInit when template has CKA_TOKEN=CK_TRUE. r=rrelyea → Bug 1915439 - improve performance of NSC_FindObjectsInit when template has CKA_TOKEN attr. r=rrelyea
Status: NEW → RESOLVED
Closed: 1 year ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: