Re: [Cfrg] Rerun: Elliptic Curves - preferred curves around 256bit work factor (ends on March 3rd)

[Phillip Hallam-Baker <[e-mail]>]

Do we have figures for performance of these versus RSA2048?

Yes, we get a reversal of the public/private speed advantage on signature.
And that in itself is a huge win on the server side

RSA signature verification takes 0.16 ms on a reasonably current machine
(signature is 6ms)

http://www.cryptopp.com/benchmarks.html

How much faster/slower one curve is over another matters much less to me
than whether the curve is faster or slower than what I am already using. I
am not going to be using P521 or P448 curves on a constrained device, I
will go for P255.

If we had figures comparing the curve candidates to RSA it would probably
be illuminating.