On Tue, 21 Apr 2009, Paul Hoffman wrote:
'openssl speed rsa1024 rsa2048' is your friend here. On my laptop, signing takes six times longer, but verifying only takes three times longer. Different platforms will give different results.
So do different versions of openssl. 0.9.8k was much slower then 0.9.8i. But openssl-1.0.0beta was faster again for me. As for dnssec-signzone, the 9.6.1 version seemed much faster for me then previous versions, ldns-signzone was extremely slow, but I guess that's why they're working on hsm-signer :) (all meassures with unsigned zones as input) Paul _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop