• State Resolved
  • Locked Locked
  • Replies 8 replies
  • Subscribers 57 subscribers
  • Views 1555 views
  • Users 0 members are here
Support feedback
Options
Options
Related

This thread has been locked.

If you have a related question, please click the "Ask a related question" button in the top right corner. The newly created question will be automatically linked to this question.

CCS compile takes 18x more time with FIPS mode in Windows 11

Jerome
Prodigy 160 points

Other Parts Discussed in Thread: C2000-CGT

Hello,

Due to compliance reasons, we are enforcing FIPS encryption on our windows workstations.
After one developer migrated from Windows 10 to Windows 11, we noticed his compile time exploded. From about 5 minutes to more than an hour.
We clean formatted his computer, and the compile was still very slow.
We updated CCS and the compiler to the latest versions, and still very slow.
Manually disabling FIPS mode in the windows registry restore the quick speed.
We built a quick HelloWorld project (attached), and it takes 5 second to compile with FIPS disabled, and 1m30 with FIPS enabled.

Tested affected versions:
- Windows 11 (seems OK with Windows 10)
- CCS 8.3.1 and 12.1.0
- C2000-CGT 18.1.4 LTS and 22.6.0 LTS

I am unsure what Windows Cryptographic service CCS is calling, and for what purposes.
I am looking for a workaround that would allow CCS to compile normally while FIPS mode is enforced.

Thanks!

 FIPSproblem-ProjectAndSystemInfo.zip

  • 0
    TI__Guru**** 476371 points

    Hello,

    I also see a slowdown with the build with FIPS mode enabled in Windows 11. I don't see the same level of slowdown as you. I'm guessing this is due to my PC being a much newer machine (12th gen intel i5 with 6 core /12 threads). Your hello world example builds in less than 1 second with FIPS disabled and 3.5 seconds with FIPS enabled.

    I then used an example with more source files. That one took 4 seconds with FIPS disabled and 24 seconds with FIPS enabled. That is a 6x decrease.

    I build the same files outside CCS and saw the same slowdown. Hence the issue does not appear to be related to CCS but the compiler itself. I will bring this thread to the attention of the compiler experts to investigate further.

    Thanks

    ki

  • 0 in reply to Ki
    Prodigy 160 points

    Thanks for your time and findings.

    Hope this gets resolved, as FIPS requirements are not going away... with NIST SP800-171, CMMC, SOC2 and other cybersecurity standards becoming increasingly baked into high profile contracts, a large number of developers will have to work in FIPS enables environnement.

    We also ran the test on brand new systems with more ressources, and had timing similar to yours. I guess a "larger" test project would be better, but we had none to share.

  • 0 in reply to Jerome
    TI__Guru**** 252630 points

    It is taking longer than I first thought to get access to a system running Windows 11.  Please be patient.

    Thanks and regards,

    -George

  • 0 in reply to George Mock
    TI__Guru**** 252630 points

    In tests we have run so far, we have seen a slow down of about 4X.  But only on Windows 11 Pro.  On Windows 11 Home, no change is seen.  Which variant of Windows 11 do you run?

    Thanks and regards,

    -George

  • 0 in reply to George Mock
    Guru 92251 points
    George Mock said:

    Which variant of Windows 11 do you run?

    The System Information screen shot in the first post shows that Jerome is using Windows 11 Pro.

  • 0 in reply to George Mock
    Prodigy 160 points

    Hello George,

    We run Windows 11 Pro across our business.
    Pro is required to join an Active Directory / Domain, so all business using a Microsoft environnement will only have Pro (Or Enterprise) editions on their workstations.

  • +1 in reply to Jerome
    TI__Guru**** 252630 points

    Thank you for your patience.  I filed the entry EXT_EP-10985 to have this issue investigated.  You are welcome to follow it with that link.

    I marked this thread resolved even though there is more work to do.  To understand why, please see the first FAQ in the CCS Forum Usage Guidelines.

    Thanks and regards,

    -George

  • 0 in reply to George Mock
    TI__Guru**** 252630 points

    Thank you once again for your patience.  It took much too long to get a Windows 11 Pro system set up so we could experiment.

    When building larger code bases, we are unable to reproduce the problem. In our tests, a FIPS enabled machine takes about 30% longer to compile a large amount of code than a non-FIPS enabled machine. We conclude the customer's problem, where 18X slow downs are seen, must involve other factors besides the FIPS setting.

    Thanks and regards,

    -George