[curves] Gueron/Krasnov P-256 in OpenSSL
trevp at trevp.net
Thu Oct 2 17:27:04 PDT 2014
While reading about Cloudflare's "UniversalSSL" , I saw that the
Gueron/Krasnov P-256 code is now in OpenSSL. It appears to be the
default in openssl-1.0.2-beta3 .
So it's easy to time with "openssl speed ecdhp256". On my Haswell
Macbook Air 1.7Ghz, Turboboost disabled via :
1.0.2-beta2 (default): 1530/sec
1.0.2-beta2 (enable-ec_nistp_64_gcc_128, Kasper et al): 3254/sec
1.0.2-beta3 (default, Gueron/Krasnov): 6580/sec
So the Kasper/Langley/Laurie version is ~2x speedup over previous, and
the Gueron/Krasnov appears ~2x speedup over that.
Interestingly, their paper reported 291 Kcycles/sec, whereas I'm
calculating this ~260 Kcycles/sec.
I haven't updated this spreadsheet  but maybe I should, it seems
this is ~10% faster than I thought!
More information about the Curves