Performance Comparison of Web Services Security: Kerberos Token Profile Against X.509 Token Profile

Web Services (WS) Security is the set of standards that provides means for applying security to WS. In this paper, the authors present the performance of the WS Security Kerberos Token profile in contrast to the X.509 Token Profile. The measurements are based on the Apache wss4j library for the X.509 Token Profile and the extensions they have made on the same library in order to support the Kerberos Token Profile. The Kerberos Token profile is based exclusively on symmetric cryptography, whereas the X.509 profile uses Public Key Cryptography for encrypting the symmetric encryption key used for deciphering the message.