From 26180f11919dfbb954169bdde2698ce04bb40a38 Mon Sep 17 00:00:00 2001
From: Alex Peters <alpe@users.noreply.github.com>
Date: Fri, 27 Mar 2026 12:13:12 +0100
Subject: [PATCH] Add kms signer benchmarks

---
 pkg/signer/aws/signer_benchmark_test.go | 83 +++++++++++++++++++++++++
 pkg/signer/gcp/signer_benchmark_test.go | 69 ++++++++++++++++++++
 2 files changed, 152 insertions(+)
 create mode 100644 pkg/signer/aws/signer_benchmark_test.go
 create mode 100644 pkg/signer/gcp/signer_benchmark_test.go

diff --git a/pkg/signer/aws/signer_benchmark_test.go b/pkg/signer/aws/signer_benchmark_test.go
new file mode 100644
index 000000000..974048f52
--- /dev/null
+++ b/pkg/signer/aws/signer_benchmark_test.go
@@ -0,0 +1,83 @@
+package aws
+
+import (
+	"bytes"
+	"os"
+	"testing"
+	"time"
+
+	"github.com/stretchr/testify/require"
+	"google.golang.org/protobuf/proto"
+
+	pb "github.com/evstack/ev-node/types/pb/evnode/v1"
+)
+
+// BenchmarkKmsSignerSign test kms round trip
+// export EVNODE_E2E_GCP_KMS_KEY_NAME=projects/<project-id>/locations/<region>/keyRings/<keyring-name>/cryptoKeys/<key-name>/cryptoKeyVersions/1
+// export EVNODE_E2E_GCP_KMS_CREDENTIALS_FILE=...
+// go test  -v -bench=BenchmarkKmsSignerSign -benchtime=3s -count=10 -run='^$' ./pkg/signer/gcp
+func BenchmarkKmsSignerSign(b *testing.B) {
+	keyID := os.Getenv("EVNODE_E2E_AWS_KMS_KEY_ID")
+	if keyID == "" {
+		b.Skip("set EVNODE_E2E_AWS_KMS_KEY_ID to run AWS KMS benchmark")
+	}
+
+	region := firstNonEmpty(
+		os.Getenv("EVNODE_E2E_AWS_KMS_REGION"),
+		os.Getenv("AWS_REGION"),
+		os.Getenv("AWS_DEFAULT_REGION"),
+	)
+	profile := os.Getenv("EVNODE_E2E_AWS_KMS_PROFILE")
+
+	signer, err := NewKmsSigner(b.Context(), region, profile, keyID, &Options{
+		Timeout:    10 * time.Second,
+		MaxRetries: 0,
+	})
+	require.NoError(b, err)
+
+	headerData := benchmarkHeaderData(b)
+
+	b.ReportAllocs()
+	b.SetBytes(int64(len(headerData)))
+	b.ResetTimer()
+
+	for b.Loop() {
+		_, err := signer.Sign(b.Context(), headerData)
+		require.NoError(b, err)
+	}
+}
+
+func firstNonEmpty(values ...string) string {
+	for _, value := range values {
+		if value != "" {
+			return value
+		}
+	}
+
+	return ""
+}
+
+func benchmarkHeaderData(b *testing.B) []byte {
+	b.Helper()
+
+	header := &pb.Header{
+		Version: &pb.Version{
+			Block: 11,
+			App:   1,
+		},
+		Height:          1,
+		Time:            1743091200000000000, // 2025-03-27T00:00:00Z
+		LastHeaderHash:  bytes.Repeat([]byte{0x3b}, 32),
+		DataHash:        bytes.Repeat([]byte{0x78}, 32),
+		AppHash:         bytes.Repeat([]byte{0xf5}, 32),
+		ProposerAddress: bytes.Repeat([]byte{0x25}, 32),
+		ValidatorHash:   bytes.Repeat([]byte{0x25}, 32),
+		ChainId:         "benchmark-chain",
+	}
+
+	headerData, err := proto.Marshal(header)
+	require.NoError(b, err)
+	require.NotEmpty(b, headerData)
+
+	return headerData
+}
diff --git a/pkg/signer/gcp/signer_benchmark_test.go b/pkg/signer/gcp/signer_benchmark_test.go
new file mode 100644
index 000000000..b688cc04c
--- /dev/null
+++ b/pkg/signer/gcp/signer_benchmark_test.go
@@ -0,0 +1,69 @@
+package gcp
+
+import (
+	"bytes"
+	"os"
+	"testing"
+	"time"
+
+	"github.com/stretchr/testify/require"
+	"google.golang.org/protobuf/proto"
+
+	pb "github.com/evstack/ev-node/types/pb/evnode/v1"
+)
+
+// BenchmarkKmsSignerSign test kms round trip
+// export EVNODE_E2E_AWS_KMS_KEY_ID="arn:aws:kms:...."
+// export EVNODE_E2E_AWS_KMS_REGION=eu-west-1
+// go test  -v -bench=BenchmarkKmsSignerSign -benchtime=3s -count=10 -run='^$' ./pkg/signer/aws
+func BenchmarkKmsSignerSign(b *testing.B) {
+	keyName := os.Getenv("EVNODE_E2E_GCP_KMS_KEY_NAME")
+	if keyName == "" {
+		b.Skip("set EVNODE_E2E_GCP_KMS_KEY_NAME to run GCP KMS benchmark")
+	}
+
+	credentialsFile := os.Getenv("EVNODE_E2E_GCP_KMS_CREDENTIALS_FILE")
+
+	signer, err := NewKmsSigner(b.Context(), keyName, &Options{
+		CredentialsFile: credentialsFile,
+		Timeout:         1 * time.Second,
+		MaxRetries:      0,
+	})
+	require.NoError(b, err)
+
+	headerData := benchmarkHeaderData(b)
+
+	b.ReportAllocs()
+	b.SetBytes(int64(len(headerData)))
+	b.ResetTimer()
+
+	for b.Loop() {
+		_, err := signer.Sign(b.Context(), headerData)
+		require.NoError(b, err)
+	}
+}
+
+func benchmarkHeaderData(b *testing.B) []byte {
+	b.Helper()
+
+	header := &pb.Header{
+		Version: &pb.Version{
+			Block: 11,
+			App:   1,
+		},
+		Height:          1,
+		Time:            1743091200000000000, // 2025-03-27T00:00:00Z
+		LastHeaderHash:  bytes.Repeat([]byte{0x3b}, 32),
+		DataHash:        bytes.Repeat([]byte{0x78}, 32),
+		AppHash:         bytes.Repeat([]byte{0xf5}, 32),
+		ProposerAddress: bytes.Repeat([]byte{0x25}, 32),
+		ValidatorHash:   bytes.Repeat([]byte{0x25}, 32),
+		ChainId:         "benchmark-chain",
+	}
+
+	headerData, err := proto.Marshal(header)
+	require.NoError(b, err)
+	require.NotEmpty(b, headerData)
+
+	return headerData
+}