Comment on RSA-260 FactorizedparentComments−stouset7d256-bit ECC on the other hand is frequently performed by 4-wide 64-bit operations with a little extra accounting.−mswphd7dand the more recent (post-quantum) lattice-based stuff can get away with ~16 bit arithmetic (it's vectors of ~512-1024 dimension, but the operations are SIMD-friendly)−monster_truck7dCan get all the way down to 4 with a little CRT/RNS if you're trying to go even faster
Comments
256-bit ECC on the other hand is frequently performed by 4-wide 64-bit operations with a little extra accounting.
and the more recent (post-quantum) lattice-based stuff can get away with ~16 bit arithmetic (it's vectors of ~512-1024 dimension, but the operations are SIMD-friendly)
Can get all the way down to 4 with a little CRT/RNS if you're trying to go even faster