5 ms·
Kyber768, which is what I see most people using for hybrid PQC deployments right now, has 1kB keys and is actually faster than elliptic curve cryptography.
by adastra22 2y ago
Kyber768, which is what I see most people using for hybrid PQC deployments right now, has 1kB keys and is actually faster than elliptic curve cryptography.
- pclmulqdq 2y ago4 kB keys, you mean, right? You have to store your private key, too. It's pretty fast otherwise, yes.
- adastra22 2y agoYou have to store 1 private key. You store/transmit/interact with millions of other public keys, so the concern over size is somewhat asymmetrical.
- pclmulqdq 2y agoMany protocols use an ephemeral private key, and protocols like TLS that don't today are moving toward ephemeral private keys faster than they are toward PQC. The ephemeral key gets signed with your long-lived private key, but that's all your long-lived key is used for.