strongSwan

{{>toc}}

h1. Speed Comparison of Public Key Algorithms

h2. 32 bit, native on a Core2Duo T9400 (one core)

h3. Public Key Signature

|_.Key type|_.Strength*|_.Operations/s|_.gmp   |_.gcrypt|_.openssl|

|RSA 512   |>.50 bits  |sign (e=3)    |>.3'708 |>.1'814 |>.2'286  |

|RSA 512   |>.50 bits  |sign (e=f4)   |>.3'946 |>.1'780 |>.2'150  |

|RSA 768   |>.62 bits  |sign (e=3)    |>.1'483 |>.625   |>.521    |

|RSA 768   |>.62 bits  |sign (e=f4)   |>.1'486 |>.626   |>.783    |

|RSA 1024  |>.73 bits  |sign (e=3)    |>.724   |>.301   |>.488    |

|RSA 1024  |>.73 bits  |sign (e=f4)   |>.722   |>.285   |>.475    |

|RSA 1536  |>.89 bits  |sign (e=3)    |>.242   |>.99    |>.117    |

|RSA 1536  |>.89 bits  |sign (e=f4)   |>.243   |>.98    |>.111    |

|RSA 2048  |>.103 bits |sign (e=3)    |>.110   |>.30    |>.80     |

|RSA 2048  |>.103 bits |sign (e=f4)   |>.109   |>.28    |>.89     |

|RSA 3072  |>.125 bits |sign (e=3)    |>.35    |>.9     |>.33     |

|RSA 3072  |>.125 bits |sign (e=f4)   |>.35    |>.15    |>.32     |

|RSA 4096  |>.142 bits |sign (e=3)    |>.15    |>.6     |>.9      |

|RSA 4096  |>.142 bits |sign (e=f4)   |>.15    |>.6     |>.9      |

|RSA 6144  |>.171 bits |sign (e=3)    |>.4     |>.2     |>.3      |

|RSA 6144  |>.171 bits |sign (e=f4)   |>.4     |>.2     |>.3      |

|RSA 8192  |>.193 bits |sign (e=3 )   |>.2     |>.1     |>.2      |

|RSA 8192  |>.193 bits |sign (e=f4)   |>.2     |>.1     |>.1      |

|ECDSA 256 |>.128 bits |sign          |=._N/A_ |=._N/A_ |>.546    |

|ECDSA 384 |>.192 bits |sign          |=._N/A_ |=._N/A_ |>.233    |

|ECDSA 521 |>.260 bits |sign          |=._N/A_ |=._N/A_ |>.113    |

|RSA 512   |>.50 bits  |verify (e=3)  |>.76'683|>.36'626|>.55'685 |

|RSA 512   |>.50 bits  |verify (e=f4) |>.32'577|>.15'860|>.25'086 |

|RSA 768   |>.62 bits  |verify (e=3)  |>.52'707|>.31'167|>.37'112 |

|RSA 768   |>.62 bits  |verify (e=f4) |>.17'375|>.10'054|>.15'034 |

|RSA 1024  |>.73 bits  |verify (e=3)  |>.37'826|>.25'688|>.28'879 |

|RSA 1024  |>.73 bits  |verify (e=f4) |>.11'402|>.6'640 |>.10'380 |

|RSA 1536  |>.89 bits  |verify (e=3)  |>.22'143|>.18'505|>.10'393 |

|RSA 1536  |>.89 bits  |verify (e=f4) |>.5'892 |>.3'770 |>.3'686  |

|RSA 2048  |>.103 bits |verify (e=3)  |>.14'175|>.8'307 |>.11'625 |

|RSA 2048  |>.103 bits |verify (e=f4) |>.3'481 |>.1'423 |>.3'535  |

|RSA 3072  |>.125 bits |verify (e=3)  |>.7'207 |>.4'930 |>.5'654  |

|RSA 3072  |>.125 bits |verify (e=f4) |>.1'729 |>.1'150 |>.1'857  |

|RSA 4096  |>.142 bits |verify (e=3)  |>.5'887 |>.4'960 |>.2'263  |

|RSA 4096  |>.142 bits |verify (e=f4) |>.1'049 |>.684   |>.672    |

|RSA 6144  |>.171 bits |verify (e=3)  |>.3'171 |>.2630  |>.977    |

|RSA 6144  |>.171 bits |verify (e=f4) |>.544   |>.335   |>.324    |

|RSA 8192  |>.193 bits |verify (e=3)  |>.2'015 |>.1638  |>.839    |

|RSA 8192  |>.193 bits |verify (e=f4) |>.334   |>.194   |>.181    |

|ECDSA 256 |>.128 bits |verify        |=._N/A_ |=._N/A_ |>.459    |

|ECDSA 384 |>.192 bits |verify        |=._N/A_ |=._N/A_ |>.196    |

|ECDSA 521 |>.260 bits |verify        |=._N/A_ |=._N/A_ |>.94     |

_* = cryptographic strength estimates according to_ "RFC 3766":http://tools.ietf.org/html/rfc3766 _using_ "www.keylength.com":http://www.keylength.com

h3. Diffie-Hellman Key Exchange

|_.DH group|_.Strength|_.Operations/s|_.gmp  |_.gcrypt|_.openssl |_.gmp* |_.gcrypt*|_.openssl*|

|MODP 768  |>.62 bits |A=g^a mod p   |>.468  |>.293   |>.371     |>.1'271|>.866    |>.1'060   |

|MODP 1024 |>.73 bits |A=g^a mod p   |>.216  |>.136   |>.192     |>.792  |>.540    |>.706     |

|MODP 1536 |>.89 bits |A=g^a mod p   |>.71   |>.46    |>.70      |>.395  |>.279    |>.379     |

|MODP 2048 |>.103 bits|A=g^a mod p   |>.31   |>.20    |>.31      |>.161  |>.112    |>.155     |

|MODP 3072 |>.125 bits|A=g^a mod p   |>.10   |>.6     |>.11      |>.77   |>.55     |>.81      |

|MODP 4096 |>.142 bits|A=g^a mod p   |>.4    |>.3     |>.4       |>.34   |>.24     |>.35      |

|MODP 6144 |>.171 bits|A=g^a mod p   |>.1    |>.1     |>.1       |>.17   |>.11     |>.17      |

|MODP 8096 |>.193 bits|A=g^a mod p   |>.1    |>.1     |>.0       |>.11   |>.7      |>.10      |

|ECP 192   |>.96 bits |A=g^a mod p   |=._N/A_|=._N/A_ |>.961     |=.-    |=.-      |=.-       |

|ECP 224   |>.112 bits|A=g^a mod p   |=._N/A_|=._N/A_ |>.724     |=.-    |=.-      |=.-       |

|ECP 256   |>.128 bits|A=g^a mod p   |=._N/A_|=._N/A_ |>.577     |=.-    |=.-      |=.-       |

|ECP 384   |>.192 bits|A=g^a mod p   |=._N/A_|=._N/A_ |>.243     |=.-    |=.-      |=.-       |

|ECP 521   |>.260 bits|A=g^a mod p   |=._N/A_|=._N/A_ |>.117     |=.-    |=.-      |=.-       |

|MODP 768  |>.62 bits |S=B^a mod p   |>.489  |>.205   |>.393     |>.1'418|>.618    |>.1'101   |

|MODP 1024 |>.73 bits |S=B^a mod p   |>.222  |>.92    |>.195     |>.845  |>.372    |>.728     |

|MODP 1536 |>.89 bits |S=B^a mod p   |>.71   |>.31    |>.71      |>.409  |>.188    |>.382     |

|MODP 2048 |>.103 bits|S=B^a mod p   |>.31   |>.14    |>.31      |>.163  |>.74     |>.156     |

|MODP 3072 |>.125 bits|S=B^a mod p   |>.10   |>.4     |>.11      |>.77   |>.36     |>.80      |

|MODP 4096 |>.142 bits|S=B^a mod p   |>.4    |>.2     |>.4       |>.34   |>.16     |>.35      |

|MODP 6144 |>.171 bits|S=B^a mod p   |>.1    |>.0     |>.1       |>.17   |>.7      |>.17      |

|MODP 8096 |>.193 bits|S=B^a mod p   |>.1    |>.0     |>.1       |>.11   |>.4      |>.10      |

|ECP 192   |>.96 bits |S=B^a mod p   |=._N/A_|=._N/A_ |>.950     |=.-    |=.-      |=.-       |

|ECP 224   |>.112 bits|S=B^a mod p   |=._N/A_|=._N/A_ |>.716     |=.-    |=.-      |=.-       |

|ECP 256   |>.128 bits|S=B^a mod p   |=._N/A_|=._N/A_ |>.564     |=.-    |=.-      |=.-       |

|ECP 384   |>.192 bits|S=B^a mod p   |=._N/A_|=._N/A_ |>.239     |=.-    |=.-      |=.-       |

|ECP 521   |>.260 bits|S=B^a mod p   |=._N/A_|=._N/A_ |>.116     |=.-    |=.-      |=.-       |

_* = using reduced exponent size (libstrongswan.dh_exponent_ansi_x9_42 = no) as recommended by_ "RFC3526":http://tools.ietf.org/html/rfc3526#section-8

h2. 64 bit, under VirtualBox, Core2Duo T9400 (one core):

h3. Public Key Signature

|_.Key type|_.Strength*|_.Operations/s|_.gmp    |_.gcrypt|_.openssl|

|RSA 512   |>.50 bits  |sign (e=3)    |>.12'715 |>.3474  |>.7'405  |

|RSA 512   |>.50 bits  |sign (e=f4)   |>.12'453 |>.3463  |>.4'471  |

|RSA 768   |>.62 bits  |sign (e=3)    |>.5'414  |>.1234  |>.2'371  |

|RSA 768   |>.62 bits  |sign (e=f4)   |>.5'617  |>.1142  |>.2'974  |

|RSA 1024  |>.73 bits  |sign (e=3)    |>.2'756  |>.769   |>.1'565  |

|RSA 1024  |>.73 bits  |sign (e=f4)   |>.2'765  |>.516   |>.1'523  |

|RSA 1536  |>.89 bits  |sign (e=3)    |>.980    |>.181   |>.548    |

|RSA 1536  |>.89 bits  |sign (e=f4)   |>.978    |>.279   |>.525    |

|RSA 2048  |>.103 bits |sign (e=3)    |>.447    |>.126   |>.160    |

|RSA 2048  |>.103 bits |sign (e=f4)   |>.453    |>.122   |>.147    |

|RSA 3072  |>.125 bits |sign (e=3)    |>.140    |>.45    |>.51     |

|RSA 3072  |>.125 bits |sign (e=f4)   |>.146    |>.44    |>.46     |

|RSA 4096  |>.142 bits |sign (e=3)    |>.71     |>.19    |>.36     |

|RSA 4096  |>.142 bits |sign (e=f4)   |>.62     |>.11    |>.34     |

|RSA 6144  |>.171 bits |sign (e=3)    |>.19     |>.7     |>.11     |

|RSA 6144  |>.171 bits |sign (e=f4)   |>.20     |>.6     |>.10     |

|RSA 8192  |>.193 bits |sign (e=3)    |>.7      |>.3     |>.4      |

|RSA 8192  |>.193 bits |sign (e=f4)   |>.8      |>.3     |>.4      |

|ECDSA 256 |>.128 bits |sign          |=._N/A_  |=._N/A_ |>.1'204  |

|ECDSA 384 |>.192 bits |sign          |=._N/A_  |=._N/A_ |>.551    |

|ECDSA 521 |>.260 bits |sign          |=._N/A_  |=._N/A_ |>.280    |

|RSA 512   |>.50 bits  |verify (e=3)  |>.131'663|>.50'944|>.86'962 |

|RSA 512   |>.50 bits  |verify (e=f4) |>.85'975 |>.25'927|>.34'702 |

|RSA 768   |>.62 bits  |verify (e=3)  |>.114'546|>.47'151|>.67'016 |

|RSA 768   |>.62 bits  |verify (e=f4) |>.51'425 |>.23'467|>.36'163 |

|RSA 1024  |>.73 bits  |verify (e=3)  |>.89'899 |>.41'223|>.57'059 |

|RSA 1024  |>.73 bits  |verify (e=f4) |>.40'736 |>.9'569 |>.26'082 |

|RSA 1536  |>.89 bits  |verify (e=3)  |>.59'941 |>.33'632|>.33'338 |

|RSA 1536  |>.89 bits  |verify (e=f4) |>.20'979 |>.9'520 |>.12'731 |

|RSA 2048  |>.103 bits |verify (e=3)  |>.35'728 |>.22'385|>.16'076 |

|RSA 2048  |>.103 bits |verify (e=f4) |>.12'313 |>.5'140 |>.4'630  |

|RSA 3072  |>.125 bits |verify (e=3)  |>.16'474 |>.21'272|>.12'929 |

|RSA 3072  |>.125 bits |verify (e=f4) |>.6'318  |>.3'377 |>.2'305  |

|RSA 4096  |>.142 bits |verify (e=3)  |>.9'081  |>.4'894 |>.4'643  |

|RSA 4096  |>.142 bits |verify (e=f4) |>.2'975  |>.919   |>.2'128  |

|RSA 6144  |>.171 bits |verify (e=3)  |>.3'758  |>.6'793 |>.2'666  |

|RSA 6144  |>.171 bits |verify (e=f4) |>.1'540  |>.1'047 |>.894    |

|RSA 8192  |>.193 bits |verify (e=3)  |>.3'039  |>.3'871 |>.1'204  |

|RSA 8192  |>.193 bits |verify (e=f4) |>.1'643  |>.579   |>.462    |

|ECDSA 256 |>.128 bits |verify        |=._N/A_  |=._N/A_ |>.1'098  |

|ECDSA 384 |>.192 bits |verify        |=._N/A_  |=._N/A_ |>.484    |

|ECDSA 521 |>.260 bits |verify        |=._N/A_  |=._N/A_ |>.239    |

_* = cryptographic strength estimates according to_ "RFC 3766":http://tools.ietf.org/html/rfc3766 _using_ "www.keylength.com":http://www.keylength.com

h3. Diffie-Hellman Key Exchange

|_.DH group|_.Strength|_.Operations/s|_.gmp  |_.gcrypt|_.openssl|_.gmp* |_.gcrypt*|_.openssl*|

|MODP 768  |>.62 bits |A=g^a mod p   |>.1'631|>.756   |>.1'040  |>.3'847|>.2'121  |>.2'786   |

|MODP 1024 |>.73 bits |A=g^a mod p   |>.805  |>.342   |>.484    |>.2'722|>.1'381  |>.1'764   |

|MODP 1536 |>.89 bits |A=g^a mod p   |>.268  |>.130   |>.99     |>.1'340|>.783    |>.873     |

|MODP 2048 |>.103 bits|A=g^a mod p   |>.121  |>.56    |>.70     |>.592  |>.320    |>.343     |

|MODP 3072 |>.125 bits|A=g^a mod p   |>.38   |>.20    |>.21     |>.282  |>.172    |>.159     |

|MODP 4096 |>.142 bits|A=g^a mod p   |>.16   |>.6     |>.8      |>.125  |>.75     |>.70      |

|MODP 6144 |>.171 bits|A=g^a mod p   |>.5    |>.2     |>.3      |>.59   |>.38     |>.31      |

|MODP 8096 |>.193 bits|A=g^a mod p   |>.2    |>.1     |>.0      |>.34   |>.22     |>.17      |

|ECP 192   |>.96 bits |A=g^a mod p   |=._N/A_|=._N/A_ |>.988    |=.-    |=.-      |=.-       |

|ECP 224   |>.112 bits|A=g^a mod p   |=._N/A_|=._N/A_ |>.873    |=.-    |=.-      |=.-       |

|ECP 256   |>.128 bits|A=g^a mod p   |=._N/A_|=._N/A_ |>.823    |=.-    |=.-      |=.-       |

|ECP 384   |>.192 bits|A=g^a mod p   |=._N/A_|=._N/A_ |>.360    |=.-    |=.-      |=.-       |

|ECP 521   |>.260 bits|A=g^a mod p   |=._N/A_|=._N/A_ |>.180    |=.-    |=.-      |=.-       |

|MODP 768  |>.62 bits |S=B^a mod p   |>.1'931|>.565   |>.1'119  |>.5'474|>.1792   |>.3'300   |

|MODP 1024 |>.73 bits |S=B^a mod p   |>.866  |>.232   |>.382    |>.3'271|>.1037   |>.1'993   |

|MODP 1536 |>.89 bits |S=B^a mod p   |>.279  |>.88    |>.135    |>.1'590|>.574    |>.920     |

|MODP 2048 |>.103 bits|S=B^a mod p   |>.123  |>.38    |>.50     |>.634  |>.216    |>.366     |

|MODP 3072 |>.125 bits|S=B^a mod p   |>.38   |>.13    |>.14     |>.289  |>.118    |>.165     |

|MODP 4096 |>.142 bits|S=B^a mod p   |>.16   |>.4     |>.9      |>.126  |>.49     |>.67      |

|MODP 6144 |>.171 bits|S=B^a mod p   |>.5    |>.1     |>.1      |>.61   |>.25     |>.31      |

|MODP 8096 |>.193 bits|S=B^a mod p   |>.2    |>.0     |>.1      |>.39   |>.14     |>.18      |

|ECP 192   |>.96 bits |S=B^a mod p   |=._N/A_|=._N/A_ |>.1'058  |=.-    |=.-      |=.-       |

|ECP 224   |>.112 bits|S=B^a mod p   |=._N/A_|=._N/A_ |>.963    |=.-    |=.-      |=.-       |

|ECP 256   |>.128 bits|S=B^a mod p   |=._N/A_|=._N/A_ |>.851    |=.-    |=.-      |=.-       |

|ECP 384   |>.192 bits|S=B^a mod p   |=._N/A_|=._N/A_ |>.364    |=.-    |=.-      |=.-       |

|ECP 521   |>.260 bits|S=B^a mod p   |=._N/A_|=._N/A_ |>.210    |=.-    |=.-      |=.-       |

_* = using reduced exponent size (libstrongswan.dh_exponent_ansi_x9_42 = no) as recommended by_ "RFC3526":http://tools.ietf.org/html/rfc3526#section-8