On 31/08/16 16:18, Gunnar Wolf wrote: > Adding is way cheaper > for a computer than multiplying, so your hardware will be able to > perform many, many more cryptographic operations with ECC than with > RSA.
That's a good argument for using EECDH in TLS, which is fair enough - with ephemeral keys it's legitimate to prioritise speed. But it's less applicable to PGP or x509, where the processing cost of the asym sig/crypt is comparatively small. A
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Sks-devel mailing list Sks-devel@nongnu.org https://lists.nongnu.org/mailman/listinfo/sks-devel