News for hackers. Stuff that matters.
Re:Overclocking SSL by nuclear_eclipse on Sunday July 04, 2010 @09:03AM (#1485610)
I'm curious why they recommend against 4096-bit certs; they say they mentioned it, but I must have missed it... Is it just because it will make the size of the certificate bigger?
Re:Overclocking SSL by agl on Sunday July 04, 2010 @09:22AM (#1485629)
If you can afford 4096-bit certs, or you need them, then you should use them. However, on my laptop, I can only handle 34 connections/second/core with a 4096-bit cert. Such performance is likely to be unacceptable for many uses.
Re:Overclocking SSL by cdine on Sunday July 04, 2010 @07:42PM (#1486658)
They specifically mention that the certificate size (and that of intermediates, among other things) impacts the message size and thus the TCP packet sizes used during handshakes. They actually explain all of this quite well, just read the entire article [specifically the "Certificates" section].
Re:Overclocking SSL by gxti on Sunday July 04, 2010 @06:50PM (#1486577)
Bigger numbers take much longer to crunch.