Diceros is a sub-project of Rhino project which focus on providing a hardware accelerated JCE provider. Initial effort include:

• AES-NI enabled AES/CTR/NoPadding, AES/CBC/NoPadding, AES/CBC/PKCS5Padding, AES/MBCBC/NoPadding, AES/MBCBC/PKCS5Padding, AES/XTS/NoPadding, AES/GCM/NoPadding encryption/decryption support
• Hardware based true random generator (DRNG)

Diceros is not a full featured JCE provider yet for now, but we will make continuous effort towards that goal. You can download the source code and follow the instruction to build it, we have test the functionality in OpenJDK 7.

https://github.com/intel-hadoop/diceros/wiki/Quick-Start

• Intel® Digital Random Number Generator (DRNG)
• AES-NI

• openssl-1.0.1c or above

• jdk6 or above

• add `libdiceros.so` and `libaesmb.so` (which are generated after build) to the environment variable `java.library.path`

• add `diceros-[VERSION].jar`(which is generated after build) to the classpath

• openssl

• yasm-1.2.0 or above

• Microsoft Visual Studio Professional 10 if building on windows

• cmake 2.6 or above

• jdk6 or above

• maven

mvn package -Pnative -Dyasm.prefix={yasm path}

set Platform=x64 mvn package -Pnative-win

mvn clean package -DskipTests -Pnative,sign,rpm -Drpm.install.prefix.default={default install path, should point to your jre home, for example: /usr/java/default/jre}

mvn clean package -DskipTests -Pnative/native-win,sign -Dkeystore.path={keystore path} -Dkeystore.alias={keystore.alias} -Dkeystore.password={keystore.password} -Dyasm.prefix={yasm path}

https://github.com/intel-hadoop/diceros/releases

Add line security.provider.10=com.intel.diceros.provider.DicerosProvider in file \<java-home\>\lib\security\java.security

Add the following line Security.addProvider(new com.intel.diceros.provider.DicerosProvider()); before calling method SecureRandom.getInstace() or Cipher.getInstance().

rpm -ivh diceros-version.rpm --prefix={your jre home, for example: /usr/java/default/jre}

If you want to use 256B as key length, you should replace file "local_policy.jar" and "US_export_policy.jar" in dir <JAVA_HOME>/lib/security/ with the corresponding file from http://www.oracle.com/technetwork/java/javase/downloads/jce-6-download-429243.html or http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html or http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html depend on the jdk version you want to use.

https://github.com/intel-hadoop/diceros/wiki/Troubleshooting

The algorithm validation of diceros uses The Advanced Encryption Standard Algorithm Validation Suite(AESAVS)to verify.(see AESSAV detail from http://http//csrc.nist.gov/groups/STM/cavp/documents/aes/AESAVS.pdf).The AESAVS is designed to perform automated testing on Implementations Under Test. Diceros use the Known Answer Test(KAT) to validation of the implementation of the Advanced Encryption Standard algorithm. The validate command: mvn test -Dtest=com.intel.diceros.test.aes.AESKatTest

Diceros performance testing use the nice tool supported from OpenJDK, Java Microbenchmark Harness(JMH). JMH is a java harness for building, running and analyzing nano/micro/milli/macro benchmarks written in java and other language targeting the JVM.(see detail from http://openjdk.java.net/projects/code-tools/jmh/)

Software prerequisite:

• apply the performance path to diceros project. the patch address is xxx, using the following command:
• cd the diceros project directory
• `patch -p1 < perf/perfWithJMH.patch
• mvn install

performance testing usage:

java -jar target/microbenchmarks.jar .*encryptPerfTest(or .*decryptPerfTest or *.cryptPerfTest -->test for both)

• -wi number of warmup iterations
• -i number of benchmarked iterations, use 10 or more to get a good idea
• -f How many times to forks a single benchmark
• -p buffer_size=xxx(default 128)
• -p sizeUnit=xx(default KB)
• -p provider=xxx(default SunJCE)
• -p mode=xxx(default AES/CTR/NoPadding)
• -p directBuffer=xxx(default false) (see the performance testing detail from https://github.com/intel-hadoop/diceros/blob/master/perf/The%20Performance%20Testing%20of%20Diceros%26SunJCE.docx)