On Fri, 13 Dec 2024 at 00:30, Andrei Popov <Andrei.Popov=
[email protected]> wrote:

>
>    - If there are significant implementations which do reuse…
>
> By default, servers using Windows TLS stack reuse ECDHE keys for up to 30
> sec. Reuse time can be configured or altogether disabled by the system
> admin. Disabling comes at a significant performance cost (for a busy TLS
> server).
>

I'd be interested if you have published performance data for this? Right
now a typical laptop-grade CPU can do ~180,000 X25519 base multiplies per
second per core (P256 around 115,000, P384 around 25,000) -- ISTM this is
not a good complexity/performance tradeoff (maybe it was more beneficial in
the past?)

Thanks,
Joe
_______________________________________________
TLS mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to