[dns-operations] estimate DNSSEC signing power

[Viktor Dukhovni]

On Tue, Sep 17, 2019 at 01:49:49PM -0400, Viktor Dukhovni wrote:

> A single CPU on my low-power SuperMicro server does (assembly optimized
> P256) ~38k signatures/sec.  It has 4 cores 8 threads, and could do more
> in parallel:
> 
>   $ openssl speed ecdsa
>   ...
>   Doing 256 bits sign ecdsa's for 10s: 382978 256 bits ECDSA signs in 10.01s 
>   ...

FWIW, by way of comparison, RSA signature speeds on the same CPU:

    Doing 1024 bits private rsa's for 10s: 89692 1024 bits private RSA's in 10.04s
    Doing 2048 bits private rsa's for 10s: 13230 2048 bits private RSA's in 10.09s
    Doing 3072 bits private rsa's for 10s: 4612 3072 bits private RSA's in 10.01s
    Doing 4096 bits private rsa's for 10s: 2098 4096 bits private RSA's in 10.13s

-- 
	Viktor.