AES-GCM Encryption Performance on Intel® Xeon® E5 v3 Processors

This case study examines the architectural improvements made to the Intel® Xeon® E5 v3 processor family in order to improve the performance of the Galois/Counter Mode of AES block encryption. It looks at the impact of these improvements on the nginx* web server when backed by the OpenSSL* SSL/TLS library. With this new generation of Xeon processors, web servers can obtain significant increases in maximum throughput by switching from AES in CBC mode with HMAC+SHA1 digests to AES-GCM.

  • Developers
  • Linux*
  • Server
  • Intermediate
  • Haswell
  • AES
  • Intel® Xeon® E5 v3 Processors
  • OpenSSL
  • Intel® AES-NI
  • Security
  • Announcing new Security Projects for Academia

    The Intel Academic Program announces new software projects for security coursework, labs and experiments. These tools support the Intel Security Curriculum Series and can be used in general aspects of security instruction. Peruse our first projects on the Advanced Encryption Standard (AES), Trusted Boot, Identity Protection and Digital Random Number Generator (DRNG) here on the Security tab:

    Utilizing AES New Instructions (AES-NI) in a Windows* 8 C# App

    AES-NI is a new security feature available on the latest Intel® Atom™ Z3000 processors (codename Bay Trail).  AES-NI provides a set of hardware instructions onboard the processor that implement some of the intensive sub-steps of the AES algorithm.  This yields additional performance when performing AES cryptographic operations.  This blog discusses a method of adding encryption and decryption that utilizes AES-NI in a Windows 8 C# app.

    AES-NI in Laymen's Terms

    What is AES-NI - first answer
    AES-NI are a set of six new instructions introduced by Intel when we introduced the new 2010 Intel® Core™ processor family code named Westmere. AES-NI stands for Advanced Encryption Standard - New Instructions. These instructions implement hardware accelerated versions of certain compute intensive steps used in the AES (RijnDael) algorithm.

    Okay - so what is the Advanced Encryption Standard (AES)?

    AES Counter Mode details (Intel AES-NI implementation)

    In this article we’ll take a closer look at AES counter (CTR) mode implementation from Intel® AES-NI library (it can be downloaded from

    AES stands for Advanced Encryption Standard and it is a symmetric encryption standard. More detailed information about AES at

    Subscribe to AES