Re: [PATCH 0/8] Implement Curve448 ECDH and Ed448

2019-12-02 Thread Niels Möller
ni...@lysator.liu.se (Niels Möller) writes: > Performance for the scalar multiplication primitives seem to be slower > than secp384 and slightly faster than secp521, and looking at point > addition, it's slower than secp521. I hope that will be improved a quite > a bit with an optimized mod

Re: rsa too slow?

2019-12-02 Thread Niels Möller
Nikos Mavrogiannopoulos writes: > I got pinged by someone testing the performance of TLS handshakes and > it seems that gnutls/nettle with RSA is significantly slower than > openssl. To quote the NEWS file for Nettle-3.4.1: Performance regression: * All RSA private key operations

Re: [PATCH 0/8] Implement Curve448 ECDH and Ed448

2019-12-02 Thread Niels Möller
Daiki Ueno writes: > Thank you. By the way, one thing I realized in my past rebase attempts > is that, this commit doing the final reduction of a value by mod q seems > to be incorrect for curve448 and should probably be reverted: > > commit 6cf6abd68eb3d6c8c8e5ab217be734f9c537037f >

Re: [PATCH 0/8] Implement Curve448 ECDH and Ed448

2019-12-02 Thread Daiki Ueno
ni...@lysator.liu.se (Niels Möller) writes: > Daiki Ueno writes: > >> From 8bc6e735d4b40cbab5e187a28e01b63a04ecd92b Mon Sep 17 00:00:00 2001 >> From: Daiki Ueno >> Date: Fri, 23 Jun 2017 17:26:18 +0200 >> Subject: [PATCH 2/4] Implement Curve448 primitives >> >> This patch adds the necessary

Re: rsa too slow?

2019-12-02 Thread Simo Sorce
On Mon, 2019-12-02 at 13:24 +0100, Nikos Mavrogiannopoulos wrote: > Hi, > I got pinged by someone testing the performance of TLS handshakes and > it seems that gnutls/nettle with RSA is significantly slower than > openssl. On the other hand, secp256r1 and ed25519 are faster. (btw. > both openssl

rsa too slow?

2019-12-02 Thread Nikos Mavrogiannopoulos
Hi, I got pinged by someone testing the performance of TLS handshakes and it seems that gnutls/nettle with RSA is significantly slower than openssl. On the other hand, secp256r1 and ed25519 are faster. (btw. both openssl and gnutls/nettle are slower than rusttls). Nevertheless the RSA caught my