On Fri, Dec 05, 2003, Ben Laurie wrote: > David Schwartz wrote: > > >>One of the applications we are working on requires us > >>to generate RSA key pairs at a rate of about 20-25 key > >>pairs/second > >>is there any application out there which can do this?? > >>is using /dev/random, /etc/entropy or accelerator card > >>with RNG any faster?? and can this achieve the speed > >>we require? > > > > > > Unfortunately, developing an RSA key pair is inherently expensive. > > The RNG > >is not the speed-limiting factor, so a faster RNG won't help you very much. > >Last time I tried to optimize RSA key generation, I got to just over 2 keys > >(1024 bit) per second on a P3-1Ghz. > > Geoff Thorpe and I had some ideas for improving the speed which we never > implemented :-) >
I had a few, distinct, ideas on that myself and I heard some of Geoff's too. The sieve part of OpenSSLs prime generation at least is not very efficient and could be enhanced in a number of ways. Bet someone's patented some though :-( Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
