storage: encryption-at-rest performance regression in FIPS build

Open

#103,336 opened on May 15, 2023 8 comments 0 reactions 0 assignees View on GitHub

A-storage C-performance T-storage

Description

**Describe the problem**

We've observed a ~20% performance regression in the FIPS build of CockroachDB, when encryption is enabled.

TPCC (FIPS vs. regular binary):

![tpccbench_aws_ear_fips](https://github.com/cockroachdb/cockroach/assets/804457/3bfd79a1-9758-4147-82fe-3a892758057c)

![tpccbench_aws_ear](https://github.com/cockroachdb/cockroach/assets/804457/823189bb-38a8-42df-b5ec-07f863bf699e)

KV95 (FIPS vs. regular binary):

![kv95_aws_ear_fips](https://github.com/cockroachdb/cockroach/assets/804457/a62a0dd9-0788-4261-b728-ffa4f584a9f2)

![kv95_aws_ear](https://github.com/cockroachdb/cockroach/assets/804457/f30f34a4-e48b-4f8b-9e45-3a14b4cc84ca)

**Environment:**

FIPS build of CockroachDB.

**Additional context**

Discussed internally, [here](https://cockroachlabs.slack.com/archives/C044KKULJGL/p1684164016734589?thread_ts=1679327933.394999&cid=C044KKULJGL).

Jira issue: CRDB-27950

Epic CRDB-16419

This issue has not been assessed yet.