Castle Shield Holdings, LLC Announces Aeolus VPN Performance Test Results
Scottsville, VIRGINIA–(BUSINESS WIRE)–Scottsville, VA—October 18, 2021– Castle Shield Holdings, LLC releases test results for its Aeolus VPN Solutions. As stated in our October 11, 2021 press release, Aeolus VPN supports Post-Quantum Cryptography (PQC) for asymmetric key exchange including three selectable symmetric encryption ciphers for TCP and UDP on the Windows, Linux, and macOS platforms.
Castle Shield’s performance testing focused on the following test attributes:
In addition, we used a minimal test environment as identified below:
This press release provides an overview of the results at a load of 256Mbps, where all platforms achieve optimal results.
Note: The test environment was kept to a minimum (e.g., 1 virtual CPU and 4GB of RAM) to determine how the solutions perform at the low-end, worst-case scenario. The symmetric Quantum Crystal Cryptography (QCC) cryptographic module runs with multiple CPU threads during the encrypt/decrypt processes, and its performance excels when implemented using 2 or more CPUs. Likewise, the size of the data packets was constrained by the standard size of the MTU (Maximum Transmission Unit), which is 1500 bytes. The QCC also has optimal performance with larger plaintext sizes. This testing cycle aimed to test the performance of our quantum-resistant, asymmetric PQC implementation rather than the symmetric encryption algorithms. ”
All test scenarios used the open-source OpenVPN and WireGuard solutions as baselines for comparison only. The solutions under test were:
Bandwidth Comparison (PKI Solutions)
Takeaway: PKI versions of Aeolus VPN (ChaCha20 and AES256_GCM) using UDP were faster than OpenVPN and WireGuard. The QCC version of Aeolus VPN is slightly slower than the baseline. The Aeolus VPN solutions perform on par with WireGuard for TCP and are slightly slower than OpenVPN.
Bandwidth Comparison (PQC Solutions)
Takeaway: Aeolus VPN with PQC outperformed Aeolus VPN with PKI while providing asymmetric quantum-resistant encryption.
Jitter for UDP PKI Comparison
Jitter for UDP PQC Comparison
Takeaway: Aeolus VPN using PKI and PQC are more efficient and produced significantly less jitter when compared to the baseline solutions.
Data Loss for UDP PKI Comparison
Data Loss for UDP PQC Comparison
Takeaway: Data loss was significantly reduced when using Aeolus VPN solutions for PKI and PQC.
Multiple Users for TCP PKI Comparison
Multiple Users for TCP PKI Comparison
Takeaway: Multiple users P2, P4, P6, and P8 were tested under a load of 1,000Mbps. When running multiple users, both the Aeolus VPN solutions for ChaCha20 and AES256_GCM outperformed OpenVPN and WireGuard. Aeolus VPN (QCC) was roughly on par with WireGuard and slightly slower than OpenVPN.
In Closing
The performance test results presented here are by no means exhaustive. The results demonstrate that both Aeolus VPN with PKI and PQC (ChaCha20 and AES256_GCM) outperformed the open-source baseline solutions. “Based on our testing, customers who want to use Castle Shield’s PQC solutions will experience no performance degradation. Many more tests can and will be run; however, these initial baseline test results show that our PKI and PQC asymmetric and symmetric encryption solutions are robust and perform extremely well. In addition, our PQC solutions are highly configurable and flexible. Customers can run PQC with three different symmetric ciphers/algorithms, and for PQC, customers may choose to run LightSaber, Saber, or FireSaber based on their specific requirements,” said Dr. Milton Mattox, Chief Technology Officer at Castle Shield, Holdings, LLC.
About Castle Shield Holdings, LLC
Founded in 2019, Castle Shield offers a complete range of enterprise-grade cybersecurity solutions that protects enterprises and consumers against all internal and external cyber threats. Our Fides quantum-resistant solutions stand strong as the last defense for enterprise and consumer data in the emerging quantum computing threat landscape. The Legion product portfolio and Fides work together to strengthen your overall data security. We monitor and address threat vectors through our scalable, multi-tenant SIEM platform, protecting enterprise systems and data efficiently and cost-effectively. In addition, we utilize a cybersecurity compliance platform (Senate) and expert analysis with an in-depth understanding of dynamic compliance standards and industry best practices to highlight cyber risk factors. Our Senate system provides comprehensive ratings for third-party vendors based on technical risk scores, compliance, and financial impact in the event of a breach. Our 360° proactive security solutions set Castle Shield apart independent of your IT backbone, whether cloud, hybrid or premise-based. For further information, please go to www.castle-shield.com.
Contacts
Technical Contact:
- Dr. Milton Mattox
- Castle Shield Holdings, LLC
- 800-491-5814 x 101
- +44 203 769 6363 x 101
- mmattox@castle-shield.com
Enterprise Contact:
- Rene Echartea
- Castle Shield Holdings, LLC
- 800-491-5814 x 102
- +44 203 769 6363 x 102