stock_toaster on Primer on elliptic curve cryptography

Comment on Primer on elliptic curve cryptography parent

I don't believe 2048bit rsa and 256bit ecdsa are of equivalent security though[1]. What do things look like with 3072bit rsa?

[1]: http://wiki.openssl.org/index.php?title=Elliptic_Curve_Crypt...

pbsd 12y

OpenSSL's 'speed' utility doesn't seem to have RSA-3072 on the list, but I suppose I can downgrade to ECDSA-224 instead:

    Doing 224 bit sign ecdsa's for 10s: 27648 224 bit ECDSA signs in 9.94s
    Doing 224 bit verify ecdsa's for 10s: 5776 224 bit ECDSA verify in 10.00s

stock_toaster 12y

there is also a huge difference between newer and older versions of openssl.

  # default openssl install (osx mavericks)
  Doing 224 bit sign ecdsa's for 10s: 39077 224 bit ECDSA signs in 9.98s 
  Doing 224 bit verify ecdsa's for 10s: 8285 224 bit ECDSA verify in 9.98s
  OpenSSL 0.9.8y 5 Feb 2013

  # homebrew openssl install
  Doing 224 bit sign ecdsa's for 10s: 61047 224 bit ECDSA signs in 9.99s 
  Doing 224 bit verify ecdsa's for 10s: 15609 224 bit ECDSA verify in 9.84s
  OpenSSL 1.0.1e 11 Feb 2013

Both on same mac laptop.

Comments