Re: Looking for a very fast key agreement system




xmath wrote:
Note that 256-bit prime-field ECDH is at the moment generally regarded
as equivalent in security to 3072-bit RSA or plain DH so that makes the
comparison even more favorable for this ECDH implementation.

Keep in mind his approach is not standard nor endorsed by any standard
committee [nor is he pushing it afaik].

That and his code has only been tested on FPU friendly platforms.

:-)

But who's counting.

Normal ECC over say P-256 isn't really slow and should be fast enough
as well. Though for verification RSA would win over P-256 verification
[on most platforms]

Tom

.



Relevant Pages

  • Re: Need RSA Encryption/Decryption Delays
    ... I have coded the Threshold RSA technique as given by Victor Shoup in ... The standard "Estimated Time to Completion" of a software project ... What is a "standard delay value"? ... or atleast the standard RSA delay values for different key size ...
    (sci.crypt)
  • Re: RSA keygen recommendations
    ... promote a contrived key generation process for RSA keys despite the ... value in deterministic key generation, but couldn't they just say seed ... Certicom clearly wanted to keep it from ever becoming a standard. ... The bankers wanted "strong primes" because it gave them a warm fuzzy ...
    (sci.crypt)
  • Re: 2nd try for a "correct" starting point for signature gcreation in RSA algorithm
    ... All parameters adhering to the RSA standard. ... I am hoping I have now achieved a correct staring point for signature creation in RSA. ... I had no idea that different contexts had different size requirements for p and q. ...
    (sci.crypt)
  • Re: 2nd try for a "correct" starting point for signature gcreation in RSA algorithm
    ... All parameters adhering to the RSA standard. ... I am hoping I have now achieved a correct staring point for signature ... Generate two large distinct random primes p and q, ...
    (sci.crypt)
  • Re: Weak keys for RSA ?
    ... Robert D. Silverman RSA Public Key Validation, ... that p,q are so-called strong primes. ... outline how to guard against the Bach/Shallit ... a standard. ...
    (sci.crypt)