[tor-bugs] #10324 [Tor]: Sign status documents with RSA2048

[Tor Bug Tracker & Wiki]

#10324: Sign status documents with RSA2048
-----------------------------+----------------------------
     Reporter:  ln5          |      Owner:
         Type:  enhancement  |     Status:  needs_revision
     Priority:  normal       |  Milestone:
    Component:  Tor          |    Version:
   Resolution:               |   Keywords:
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+----------------------------

Comment (by nickm):

 '''CPU impact''':

 RSA signing with authority signing keys is probably not a significant
 performance impact in CPU, since we sign three things per period: a vote,
 and both kinds of consensus.  My little laptop takes 9 ms for an RSA4096
 signature.  This just doesn't matter.

 For verification, clients need to verify every signature on a certificate
 when they load it, and every signature on a consensus when they load that.
 Worst case, that's 18 signatures, assuming you're starting cold.  My
 laptop verifies an RSA4096 signature in 0.14 ms.

 '''Document size impact'''

 Currently, signatures take up only 0.3% of the compressed size of a
 microdesc consensus, so quadrupling them in size would probably eat up no
 more than 1% of the compressed microdesc consensus size.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10324#comment:13>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online