2 ms·
They are harder to implement than ECC.
by dadrian 2y ago
They are harder to implement than ECC.
- less_less 2y agoReally? My experience is that RSA in general is harder because it has so many knobs, but if you just lock it to the easiest-to-implement-securely choices then it's not so bad. However, for DJB's point there is a major advantage for X25519/X448 specifically: it's hard to get a huge speedup by implementing them insecurely, and the same is not true of RSA.