I'm studying the performance of postquantum KEM in TLS with the OQS (OQS is a project that integrate liboqs to openssl).

I don't know why, but the KEM algorithms performance in TLS is 10 times slower than using the openssl speed command.

For example, Kyber512 takes more or less 2.20 ms to perform the key generation in TLS with the method OQS_KEM_keypair, while with the command openssl takes more or less 0.14 ms in a Raspberry Pi 3B+.

Can someone explain what's wrong? Does the TLS protocol affect in the postquantum algorithms speed?

  • 1
    $\begingroup$ Because of different sizes? $\endgroup$ – kelalaka Apr 13 at 22:20
  • $\begingroup$ Yes I thought the same, that the keys size or the message shared size change with the TLS protocol. But I don't understand why. $\endgroup$ – jmr Apr 14 at 12:58
  • $\begingroup$ It could also be programming overhead, data locality, IO overhead and whatnot, or a combination of many of these. Without explicit knowledge on how this is programmed it will be pretty tricky to establish, unless indeed different key sizes are used. $\endgroup$ – Maarten Bodewes Apr 15 at 21:36

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.