Signing uses the private key, normally with a longer exponent. Verification uses the public key, normally with a short exponent and with mostly zeros in the exponent. Good cryptographic software should not have different execution times dependent on a bit value, though.
Martin icewind <[EMAIL PROTECTED]>@openssl.org on 2002-10-27 23:11:12 Please respond to [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] To: [EMAIL PROTECTED] cc: Subject: speed differences between EVP_Sign and EVP_Verify I am running some speed tests in which I use the EVP_Sign and EVP_Verify functions. I have noticed that the Signing takes much longer (about 10 times longer) on average than does Verifying. This doesnt make sense to me. Is what I am seeing the expected behavior? I am using the same size data for both tests. Thanks for any insight. __________________________________________________ Do you Yahoo!? Y! Web Hosting - Let the expert host your web site http://webhosting.yahoo.com/ ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
