Crunching the Numbers Post Quantum Algorithm Performance
summary
Benchmarks compare classic vs post‑quantum signatures using Bouncy Castle in software and five HSMs, with three HSMs interoperating on NIST Round‑3 Dilithium and two still on Round‑2. Laptop certificate issuance hits about 800 certificates/sec for RSA‑3072 and ~700 certificates/sec for Dilithium2; Dilithium2 public keys are ~1,384‑bytes and Dilithium5 certificates reach ~7–8 KB. One cloud HSM yields ~45 signatures/sec (latency and larger signature transfer matter); HSM storage and constrained devices face key‑size and capacity tradeoffs.
AI-written summary · about
chapters (12)
- 0:00Welcome
- 1:09Applied cryptography performance
- 2:14Post-quantum algorithm security
- 4:45Public vs private key sizes
- 8:38Certificate sizes and storage
- 10:24Software speed measurements
- 14:42HSM performance tests
- 19:42Key generation and hash signatures
- 21:26PKI scaling challenges
- 23:15Optimizations and open questions
- 24:38Q&A on embedded systems
- 26:12Private key sizes and storage
related talks
58mPQC Integration in HSMs: From Standards to Strategy
23mOverview of the NIST Post Quantum Algorithms
36mPost-Quantum Cryptography for Digital Signing
24mUpdate on end-to-end PKI and HSM integrations with ML-DSA
32mCybersecurity in Post Quantum Era
28mMixed Certificate Chains for the Transition to Post Quantum Authentication in PKI
43mStatus report on Post Quantum Cryptography Standardization
46mAchieving Quantum Readiness: A Comprehensive Approach