[tor-dev] Quantum-safe Hybrid handshake for Tor
kernelcorn at riseup.net
Sun Apr 3 12:54:29 UTC 2016
On 04/03/2016 02:52 AM, Yawning Angel wrote:
> Your definition of "reasonably fast" doesn't match mine. The number
> for SIDH (key exchange, when the thread was going off on a tangent
> about signatures) is ~200ms.
> A portable newhope (Ring-LWE) implementation on my laptop can do one
> side of the exchange in ~190 usec. Saving a few cells is not a good
> reason to use a key exchange mechanism that is 1000x slower
> (NTRUEncrypt is also fast enough to be competitive).
I have yet to see any SIDH benchmarks either. I checked the citation but
I wasn't able to confirm where the ~200ms number came from. Thanks for
throwing out specific numbers on Ring-LWE, I wasn't aware that it was so
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 538 bytes
Desc: OpenPGP digital signature
More information about the tor-dev