<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><pre style="white-space: pre-wrap; word-wrap: break-word; width: 1065px; "></pre><div><div>On Sep 9, 2013, at 7:30 PM, Michael Ströder <michael at <a href="http://stroeder.com">stroeder.com</a>> wrote:</div><div></div><blockquote type="cite"><div><br></div><div>> Peter Gutmann wrote:</div><div><br></div><div></div><blockquote type="cite"><div>> Do you have numbers about the relative and absolute performance impact?</div><div>> Personally I don't see performance problems but I can't prove my position with</div><div>> numbers.</div></blockquote><div><br></div><div>MBA-2:tmp synp$ openssl speed dsa1024 dsa2048</div></blockquote>[…]<br><blockquote type="cite"><div><font face="Courier"> sign verify sign/s verify/s</font></div><div><font face="Courier">dsa 1024 bits 0.000445s 0.000515s 2247.6 1941.8</font></div><div><font face="Courier">dsa 2048 bits 0.001416s 0.001733s 706.4 577.2</font></div></blockquote><div><br></div>We are arguing about a key exchange that goes from ~1ms to ~3ms (where the cracking goes from "yes" to "no"). Yes, this is more but this is absolutely not a problem for PCs or even phones or tablets especially in the light of session keep alive and other techniques that allow a key exchange to last a while. </div><div><br></div><div>Is the complaint that the server load is too high? <br></div><div><br></div><div>Lastly, going a partial step seems strange also. Why do we what to put ourselves through this again so soon? The French government suggests 2048 now (for both RSA and DHE), and will only last 6 years. From </div><div><span class="Apple-tab-span" style="white-space:pre"> </span><a href="http://www.ssi.gouv.fr/IMG/pdf/RGS_B_1.pdf">http://www.ssi.gouv.fr/IMG/pdf/RGS_B_1.pdf</a></div><div><br></div><div><div></div><blockquote type="cite">La taille minimale du module est de 2048 bits, pour une utilisation ne devant pas depasser lannee 2020.</blockquote>The minimum size of the modulus is 2048 bits for use not to exceed 2020.<br><br><blockquote type="cite">Pour une utilisation au-dela de 2020, la taille minimale du module est de 4096 bits</blockquote>For use beyond a 2020, the minimum module size is 4096 bits<br><blockquote type="cite"></blockquote></div><div><br></div><div>Pardon the bad cut/paste and google translate, but I believe you get the point. </div><div><br></div></body></html>