sci.crypt
  Home FAQ Contact Sign in
sci.crypt only
 
Advanced search
May 2008
motuwethfrsasuw
   1234 18
567891011 19
12131415161718 20
19202122232425 21
262728293031  22
2008
 Jan   Feb   Mar   Apr 
 May   Jun   Jul   Aug 
 Sep   Oct   Nov   Dec 
2008 2007 2006  
total
sci.crypt Profile…
RELATED GROUPS

POPULAR GROUPS

 Up
  OpenSSL Performance         


Author: Le Chaud Lapin
Date: May 14, 2008 23:53

Hi All,

I did a quick sanity check on performance of my RSA implementation
with following parameters:

p =
102639592829741105772054196573991675900716567808038066803341933521790711307779
q =
106603488380168454820927220360012878679207958575989291522270608237193062808643

n = p * q [n has bit 511 set]

e = 17

I caculate [ciphertext = plaintext raised to e mod n] at just over
44,000 operations per second.

My code is un-optimized C++, with some assistive assembly, compiled
under Visual C++ 2005, running in Release mode on:

Microsoft® Windows Vista™ Ultimate
AMD Athlon(tm) 64 X2 Dual Core Processor 3600+, 1900 Mhz, 2 Core(s), 2
Logical Processor(s)
2.0 GB RAM

For a quick comparison I looked an OpenSSL performance table:

http://lists.freebsd.org/pipermail/freebsd-performance/2004-November/000956.html
Show full article (1.29Kb)
2 Comments
  Asymmetric key pairs storage format         


Author: 1.41421
Date: May 14, 2008 12:27

I would be interested to store RSA and DSA key pairs (that is,
both private and public keys) to persistent storage in a platform-
independent way. I am not aware of any officially anointed formats out
there for this purpose, but maybe somebody in this forum knows better.

Feedback, anyone?
10 Comments
  Re: Ubuntu/Debian vulnerability impact?         


Author: Ignoramus17861
Date: May 14, 2008 01:19

On 2008-05-14, sk8r-365 sk8r.debian.etch.invalid.org> wrote:
> Feverishly pounding upon a keyboard Ignoramus17861 typed:
>> In regards to this giant fuckup:
>>
>> http://www.ubuntu.com/usn/usn-612-2
>>
>> What exactly is the impact of this vulnerability?
>
>
> "A weakness has been discovered in the random number generator used by
> OpenSSL on Debian and Ubuntu systems. As a result of this weakness,
> certain encryption keys are much more common than they should be, such
> that an attacker could guess the key through a brute-force attack given
> minimal knowledge of the system. This particularly affects the use of
> encryption keys in OpenSSH."
>
> Follow the instructions from the URL you provided:
>
> "Once the update is applied, weak user keys will be automatically
> rejected where possible (though they cannot be detected in all cases). ...
Show full article (1.71Kb)
11 Comments