3 ms·
I don't believe 2048bit rsa and 256bit ecdsa are of equivalent security though[1]. What do things look like with 3072bit rsa? [1]: http://wiki.openssl.org/inde
by stock_toaster 13y ago
I don't believe 2048bit rsa and 256bit ecdsa are of equivalent security though[1]. What do things look like with 3072bit rsa?
[1]: http://wiki.openssl.org/index.php?title=Elliptic_Curve_Cryptography http://wiki.openssl.org/index.php?title=Elliptic_Curve_Crypt...
- pbsd 13y agoOpenSSL's 'speed' utility doesn't seem to have RSA-3072 on the list, but I suppose I can downgrade to ECDSA-224 instead: Doing 224 bit sign ecdsa's for 10s: 27648 224 bit ECDSA signs in 9.94s Doing 224 bit verify ecdsa's for 10s: 5776 224 bit ECDSA verify in 10.00s
- stock_toaster 13y agothere is also a huge difference between newer and older versions of openssl. # default openssl install (osx mavericks) Doing 224 bit sign ecdsa's for 10s: 39077 224 bit ECDSA signs in 9.98s Doing 224 bit verify ecdsa's for 10s: 8285 224 bit ECDSA verify in 9.98s OpenSSL 0.9.8y 5 Feb 2013 vs # homebrew openssl install Doing 224 bit sign ecdsa's for 10s: 61047 224 bit ECDSA signs in 9.99s Doing 224 bit verify ecdsa's for 10s: 15609 224 bit ECDSA verify in 9.84s OpenSSL 1.0.1e 11 Feb 2013 Both on same mac laptop.