DSig: Breaking the Barrier of Signatures in Data Centers
Talkat 18th USENIX Symposium on Operating Systems Design and Implementation (OSDI '24) · 2024-07-10..07-12·
summary
Claims a hybrid OTS+EdDSA scheme that moves expensive work to a background plane and pre-distributes OTS public keys over RDMA, achieving 0.7 μs signing and 5.1 μs verification with under 2.5 μs transmission on 100 Gbps RDMA. Evaluation shows 2.5×–6.9× higher throughput than EdDSA and cuts end-to-end latency in HERD, Redis, Liquibook and BFT broadcast/replication by 69%–86% using commodity Linux servers and RDMA NICs.
AI-written summary · about
chapters (12)
- 0:00DSig introduction
- 1:05How signatures work
- 2:53Signatures in data centers
- 4:20DSig design insights
- 7:50One-time vs traditional signatures
- 9:16DSig architecture
- 11:23Choosing one-time signature scheme
- 12:48Evaluation setup
- 13:53Latency improvements
- 14:36Throughput gains
- 14:56End-to-end latency impact
- 15:40Conclusion
related talks
27msRDMA -- Efficient NIC-based Authentication and Encryption for Remote Direct Memory
49mDigital Signatures
40mCryptography in Distributed Systems
13mNew Asymmetric Crypto Algorithm in DPDK - EdDSA
19mOSPEAD: Optimal Ring Signatures
28mSchnorr Signatures
15mSecuring RDMA for High-Performance Datacenter Storage Systems
30mStateful Hash based Signatures: Practical Enhancements and Lessons learned