TLS/crypto library update in v10.6.0.0+

Content

• In this firmware release, we will be including an updated crypto library
• This update is required to maintain CVE updates
• The updated crypto library improves security which comes with an associated performance cost
• The performance cost will vary depending on the size of payloads, TPS, CPU cores, and use-case, particularly dp:verify() function and verify processing policy action
• It is recommended, especially for clients who use signature verification, that capacity planning is done in conjunction with the upgrade to 10.6.0.X

• Impact is predominantly observed when using dp:verify() function and verify processing policy action
• The impact is felt more with smaller payloads and larger CPU core counts
• SSL handshake costs, are felt less than verify costs, and vary depending on key size (smaller keys feel greater impact)
• These costs are observed as CPU usage increase and decrease in maximum TPS
• The test cases used to identify the impacts are "micro benchmarks" that are scoped narrowly to identify specific areas like cryptographic signature verification