Microsoft KB Archive/829979

= PRB: Microsoft Cryptographic Service Provider Performance Degrades After You Install nCipher Device Software =

PSS ID Number: 829979

Article Last Modified on 10/20/2003

-

The information in this article applies to:


 * Microsoft Windows Rights Management Services (RMS) for Windows Server 2003

-



Important This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry



SYMPTOMS
After you install the nCipher device software on a fast computer, when you perform encryption processes by using Microsoft Cryptographic Service Provider, you may experience performance degradation.



CAUSE
This problem may occur because of a limitation in the nCipher device software.

When the nCipher device software is installed, it takes over modular exponentiation (ModExp) processes from the central processing unit (CPU) and transfers these processes to the nCipher device. This transfer benefits slower computers, and is designed for more efficient encryption of keys. However, on faster computers, the CPU can outperform the nCipher device because of differences in the logic that is associated with the ModExp function. Therefore, on faster computers, when the nCipher device takes over ModExp processes, you may experience performance degradation.

The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, regarding the performance or reliability of these products.



RESOLUTION
Warning If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

To resolve this problem, return ModExp processing to the CPU of your computer by removing the following registry key:



MORE INFORMATION
To get the best performance out of an nCipher hardware security modules (HSM) enabled computer, perform the following two tests to measure the throughput of a fully-configured computer:
 * 1) Test the computer with the following registry key set to the default value (Nfmodexp.dll):
 * 2) Either clear or remove the registry key from step 1, and then test the computer.

Use the configuration that results in a higher throughput.

Keywords: kbProvider kbCrypt kbRegistry KB829979

Technology: kbWinMediaSearch

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© 2004 Microsoft Corporation. All rights reserved.