Back to Docs
// PERFORMANCE
Benchmarks
Reproducible performance measurements on AWS c6i.metal instances. All tests run with production enclave builds.
Test Environment
Instance Type
c6i.metal
128 vCPUs, 256GB RAM
Enclave Resources
8 vCPU / 16GB RAM
Dedicated to signing
Region
us-east-1
Same AZ as client
Performance Results
Signing Latency
| Test | P50 | P99 | P99.9 | Notes |
|---|---|---|---|---|
| EdDSA (Ed25519) | 38µs | 42µs | 67µs | Single signature, warm enclave |
| ECDSA (secp256k1) | 52µs | 61µs | 89µs | Single signature, warm enclave |
| Batch (100 sigs) | 1.2ms | 1.8ms | 2.4ms | EdDSA batch signing |
Throughput
| Test | Result | Notes |
|---|---|---|
| EdDSA Sequential | ~24,000 sigs/sec | Single thread, c6i.metal |
| EdDSA Parallel (8 threads) | ~95,000 sigs/sec | c6i.metal, 8 enclave vCPUs |
| ECDSA Sequential | ~16,000 sigs/sec | Single thread, c6i.metal |
Enclave Operations
| Test | Result | Notes |
|---|---|---|
| Cold Start | ~8 seconds | From terraform apply to ready |
| Warm Restart | ~2 seconds | Enclave reboot, keys in memory |
| Key Import | ~150ms | Decrypt + load from S3 |
| Attestation Generation | ~5ms | Full NSM attestation document |
Comparison with Alternatives
How ZeroCopy compares to common signing solutions.
| Provider | Latency | Throughput | Notes |
|---|---|---|---|
| AWS KMS | 15-35ms | ~1,000 req/sec | Network RTT + API overhead |
| Fireblocks MPC | 200-500ms | ~100 req/sec | Multi-party coordination |
| HashiCorp Vault | 5-15ms | ~5,000 req/sec | Local HSM backend |
| ZeroCopy Enclave833x faster | 42µs (P99) | ~95,000 sigs/sec | In-VPC, no network hop |
Reproduce These Results
All benchmarks are reproducible using our open-source CLI.
# Install the CLI
brew install zerocopy-systems/tap/zcp
# Run benchmark suite
zcp benchmark --algorithm ed25519 --iterations 10000
Was this page helpful?