[Pcsclite-muscle] High CPU load with pcscd and Kerkey security Module

Ludovic Rousseau ludovic.rousseau
Tue Nov 22 09:32:43 PST 2016

2016-11-22 17:41 GMT+01:00 Oliver Graute <oliver.graute at gmail.com>:
> The load is high the first 5-10 min after booting of our system.
> In this time we start two instances of apache webserver and our
> application. Then its settle down and spike up if a TLS session
> is build up. The TLS Handshake always causes a bit load on
> pcscd and the Kerkey SM. With one TLS session its usable
> but not with more.
> I don't understand why so many SCardStatus operations and
> SCardTransmit are needed and where their come from.
> Probably their caused from the closed ST Kerkey lib or above
> from mod_nss or nss.

The high number of SCardTransmit() calls is not really surprising for me.

The driver should just wait after the "card" to respond. Maybe the
/usr/lib/pcsc/drivers/kerkey/libccidkerkey.so driver is not efficient
and uses busy loops or other CPU intensive code.
I guess you do not have the source code of this part either?


 Dr. Ludovic Rousseau

More information about the pcsclite-muscle mailing list