TACC1441 Hardware Accelerator

Transcription

1 TACC1441 Hardware Accelerator AccessData and Tableau Joint Web Event September 14, 2007

2 Agenda Five reasons to deploy hardware acceleration TACC1441 Overview Changing the shape of password recovery Performance Benchmarks TACC Use Case Scenarios What, when, & how much? Q&A / Wrap-up

3 Five Reasons to Accelerate Password Recovery with TACC1441 Hardware Accelerators 1. Reduce password recovery times 2. Increase the chance of successful password recovery 3. Reduce the number of computer systems dedicated to password recovery 4. Better utilize existing computers that are used for brute-force password attacks 5. Reduce Total Cost of Ownership (TCO)

4 So, How d We Get Here? Collaboration between AccessData & Tableau AccessData: Password recovery expertise Tableau: Forensic hardware device expertise Milestones Demonstrated at Techno Security June 2007 Production launched September, 2007

5 What Is a Tableau Hardware Accelerator? TACC = Tableau Accelerator FPGA-based hardware Massively parallel Works on many problems (i.e., passwords) at the same time. First Implementation: Dictionarybased password attacks Re-configurable Re-target for different password attacks Designed to work with and accelerate AccessData PRTK and DNA software Designed to be field-updatable with new decryption algorithms (future) Patents Pending

6 TACC1441 Configurations (Today) TACC1441i Internal, bay-mount unit TACC1441e External, tabletop unit

7 TACC1441 Configurations (Tomorrow) Rack-mounted configurations suitable for server room situations Self-contained password recovery ( appliances ) Host Computer, Multiple TACCs, Networked, Fully Licensed What will our customers ask for?

8 Why Hardware Acceleration? Problem: Password Attacks Are Slow

9 Problem Password Attacks Are Slow Password / encryption schemes use password key transformations. Designed to be computationally complex Popular transformations based on SHA-1 hashing. A modern Intel-based computer might be able to do 2 20 million SHA-1 transformations / second Our goal was to dramatically improve this

10 Solution: Use Hardware Acceleration

11 Use Hardware Acceleration Key transformations fit well in FPGA based hardware FPGA = Field Programmable Gate Array Like an ASIC (Application Specific IC), but re-configurable A single compute engine inside an FPGA can do 1 million or more SHA-1 hashes per second. Many compute engines can be implemented on a single accelerator running in parallel. A single hardware accelerator might have dozens to hundreds of compute engines

12 CPUs vs. Hardware Acceleration Current Intel CPUs 2-20 million SHA-1 hashes per second 1,000-10,000 WinZip9 passwords per second PGP and WinRAR are even slower First generation Tableau hardware accelerator 120 million+ SHA-1 hashes per second 60,000+ WinZip9 passwords per second PGP and WinRAR scale similarly TACC1441 Hardware acceleration yields 6x 60x gain in performance over current Intel CPUs

13 Agenda Re-Shaping Password Recovery

14 Re-Shaping Password Recovery Current Software Architecture Suspect Computer processing on a traditional PC Suspect Dictionary Standard Dictionary Trial Password Generator Algorithm- Specific Transforms (lots of nasty calculations) First-level Password Validation check bytes Second-level Password Validation (file auth. or decryption) Success! millions (billions? more?) of attempts required

15 Re-Shaping Password Recovery What Part of Password Recovery Fits in Hardware? Suspect Computer work that fits well in hardware is highlighted in RED Suspect Dictionary Standard Dictionary Trial Password Generator Algorithm- Specific Transforms (lots of nasty calculations) First-level Password Validation check bytes Second-level Password Validation (file auth. or decryption) Success! millions (billions? more?) of attempts required

16 Password Recovery with TACC Suspect Computer processing which remains on the host PC Suspect Dictionary Standard Dictionary Trial Password Generator runs continuously Tableau TACC API (Application Programming Interface) runs continuously Second-level Password Validation (file auth. or decryption) Success! Algorithm- Specific Transforms (lots of nasty calculations) First-level Password Validation check bytes processing on TACC hardware

17 Decryption Algorithms Supported Decryption Support (as of 9/1/2007): WinZip9 WinRAR PGP SDA PGP Disk v4 PGP Disk v6 AES256 PGP Disk v6 Cast 128 PGP Message SHA-1 Future Decryption Support: Based on market needs.

18 Performance Benchmarks

19 Core2 Quadcore: PRTK With & Without One TACC

20 Core2 Quadcore: PRTK With & Without 4 TACCs

21 Benchmark Performance Testing Single TACC solutions Passwords per Second vs. Computing Platform WinRAR PGP SDA PGP Disk v6 AES256 PGP Disk v6 Cast128 PGP Disk v4 WinZip9 0 10,000 20,000 30,000 40,000 50,000 60,000 70,000 Pw d/sec Pentium 4-3.8GHz Core 2 Quad GHz Quad + TACC1441

22 Multiple TACC s per host: Linear Performance Gains Passwords per Second vs. # of Tableau Accelerators 300, , ,000 Pwd/Sec 150, ,000 50, Number of TACC1441 Hardw are Accelerators (connected to a single Core 2 Quad 2.40GHz host) WinZip9 PGP Disk v4 PGP Disk v6 Cast128 PGP Disk v6 AES256 PGP SDA WinRAR

23 PRTK & TACC1441 Use Case Options Scenario #1 One Host : One TACC1441 Scenario #2 One Host : Multiple TACC1441 s Single TACC1441 Hardware Accelerator (External or Internal) Daisy Chained TACC1441 s Via 1394B Multiple TACC1441 Hardware Accelerators (External or Internal) IEEE 1394B Host Integration IEEE 1394B Host Integration Single PRTK Licensed Host PC or Server Single PRTK Licensed Host PC or Server

24 DNA & TACC1441 Use Case Options Planning Your TACC1441 Accelerated DNA Network DNA Master Controller DNA Supervisor 1 DNA Supervisor N TCP/IP IEEE 1394B IEEE 1394B IEEE 1394B IEEE 1394B DNA Worker 1 (w/ Single TACC1441) DNA Worker 2 (w/ Multiple TACC1441/s) DNA Worker 3 (w/ Single TACC1441) DNA Worker N (w/ Single TACC1441)

25 Designed to be Transparent to the End User TACC1441 User Interface = AccessData PRTK or DNA TACC1441 software api manages all accelerator board activities WinZip to PGP to RAR to etc, etc Transparent to the user FPGA reconfiguration in less than 1 second

26 Accelerated PRTK or DNA Solution Offerings Three solution offerings: TACC1441 for existing DNA or PRTK installations TACC new DNA-50 license TACC new PRTK license Each offering includes one TACC1441 unit, the Tableau API, and all required Access Data software

27 Availability, Pricing, & Warranty Available through: AccessData Sales AccessData Authorized Resellers Tableau Authorized Resellers Introductory Pricing: $ 4995 (USD) + cost of PRTK or DNA (if needed) Warranty: One year from date of purchase

28 Questions & Answers Questions? Thank you! We appreciate your time to be here today.