Re: Looking for a very fast key agreement system


xmath wrote:
Note that 256-bit prime-field ECDH is at the moment generally regarded
as equivalent in security to 3072-bit RSA or plain DH so that makes the
comparison even more favorable for this ECDH implementation.

Keep in mind his approach is not standard nor endorsed by any standard
committee [nor is he pushing it afaik].

That and his code has only been tested on FPU friendly platforms.

:-)

But who's counting.

Normal ECC over say P-256 isn't really slow and should be fast enough
as well. Though for verification RSA would win over P-256 verification
[on most platforms]

Tom

.

Relevant Pages