Every latency claim on this site is reproducible. This page documents the test conditions, methodology, and raw comparisons so you can verify our numbers before committing.
10,000 TPS sustainedRegion: AWS us-east-1Algorithm: secp256k1 ECDSAInstance: c6i.4xlargeMeasured under sustained 10k TPS workload, AWS us-east-1, secp256k1 ECDSA. Every bar is P99 latency.
Managed service round-trip
High variance, jitter-prone
Deterministic P99, in-VPC
secp256k1 ECDSA signing on AWS us-east-1 (c6i.4xlarge). AWS KMS reflects SDK round-trip. ZeroCopy reflects in-process vsock call to the Nitro Enclave. HSM reflects network-attached soft-HSM (OpenDNSSEC baseline).Stop compromising. Compare your current setup to ZeroCopy.
| Feature | AWS KMS | Fireblocks MPC | ZeroCopy |
|---|---|---|---|
| Signing Latency | 150ms | 200ms | 42µs |
| Keys Exportable? | Yes (AWS) | Yes (vendor) | Never |
| Counterparty Risk | AWS | Fireblocks | You own the enclave |
| Deploy in Your VPC | |||
| Per-Signature Attestation | Partial | Cryptographic | |
| SOC-2, 17a-4 Ready | Partial | Partial | Built-in |
| Deployment Time | Instant | 2-4 weeks | 1 hour |
Measured using the AWS SDK for Rust (aws-sdk-kms v0.35). Each measurement captures the full round-trip from application code to KMS API and back, including TLS handshake amortization over 100 warm-up requests. P99 measured over 50,000 iterations.
SoftHSMv2 running on a network-attached EC2 instance in the same availability zone. Signing requests made over a local TCP socket. Variance range captures min and max P99 across 5 sustained load runs (10 minutes each at 1k, 2k, 5k, 8k, 10k TPS).
Signing request enters the Nitro Enclave via vsock IPC. The enclave runs a zero-copy Rust signing loop using k256 for secp256k1 ECDSA. CPU affinity is pinned via isolcpus. Measurement begins at application call site and ends on attestation receipt. P99 measured over 1,000,000 iterations at 10k TPS.
Full dataset comparing ZeroCopy, AWS KMS, Fireblocks, and legacy HSMs
How non-deterministic signing latency costs trading firms millions annually
How we use AWS Nitro for memory isolation and remote attestation
Kernel-bypass I/O with io_uring and vsock — why we skip the kernel
Start a free trial to run ZeroCopy in your own AWS environment and measure the latency yourself.