> Good cryptographic
> software should not have different execution times
> dependent on a bit value, though.
(...) Or are you just saying that the fact that
the public key has mostly zeros in the exponent should
not matter, and the speed difference can be attributed
only to the exponent size?
Signing uses the private key, normally with a longer exponent.
Verification uses the public key, normally with a short exponent
and with mostly zeros in the exponent. Good cryptographic
software should not have different execution times dependent
on a bit value, though.
Martin
icewind <[EMAIL PR
On Sun, Oct 27, 2002 at 02:11:12PM -0800, icewind wrote:
> I am running some speed tests in which I use the
> EVP_Sign and EVP_Verify functions. I have noticed that
> the Signing takes much longer (about 10 times longer)
> on average than does Verifying. This doesnt make sense
> to me. Is what I am