Hot answers tagged dsa
7
Well, it's been an entire day, and no one has given an authoritative answer; I'll throw in my guess as to why the people designing DSA made the choices they did.
With DSA, there are three operations that are relevent to this discussion:
A: do precomputation of a signature (without seeing the message being signed)
B: given a precomputed signature and a ...
7
If you compare DSA with SHA-256 and a 2048 bit group modulus $p$, to RSA with SHA-256, a 2048 bit modulus $n$ and public exponent $e = 65537$, on you will at least perform the following operations:
DSA
$g^{u_1}y^{u_2}$ - 2*256 squares $\mod p$, up to on average 2*128 multiplications $\mod p$, depending on implementation optimizations.
RSA
$s^e$ - 16 ...
Only top voted, non community-wiki answers of a minimum length are eligible
