High-speed high-security signatures

You are looking at a specific version 20110927:095352 of this paper. See the latest version.

Paper 2011/368

High-speed high-security signatures

Daniel J. Bernstein and Niels Duif and Tanja Lange and Peter Schwabe and Bo-Yin Yang

Abstract

This paper shows that a $390 mass-market quad-core 2.4GHz Intel Westmere (Xeon E5620) CPU can create 109000 signatures per second and verify 71000 signatures per second on an elliptic curve at a 2^128 security level. Public keys are 32 bytes, and signatures are 64 bytes. These performance figures include strong defenses against software side-channel attacks: there is no data flow from secret keys to array indices, and there is no data flow from secret keys to branch conditions.

Metadata

Available format(s): PDF
Category: Public-key cryptography
Publication info: Published elsewhere. This is the full version of a paper accepted at CHES.
Keywords: Elliptic curves Edwards curves signatures speed software side channels foolproof session keys
Contact author(s): tanja @ hyperelliptic org
History: 2011-09-27: revised; 2011-07-10: received; See all versions
Short URL: https://ia.cr/2011/368
License: CC BY