Android 上的 DH 密钥对生成时间

发布于 2024-08-25 10:04:53 字数 641 浏览 15 评论 0原文

这是我用来生成 DH 密钥对的代码：（

KeyPairGenerator keyGen = KeyPairGenerator.getInstance("DH");
keyGen.initialize(1024, new SecureRandom());
KeyPair ackp = keyGen.generateKeyPair();

当然，没有所需的 try/catch）。

我已经做了一些测试，迭代运行此类代码并改变密钥大小（特别是从 128 以 128 步长增加到 1024。1024 将是所需的大小。

首先，运行每个大小生成 10 次以获得一些结果的最小标准偏差会导致结果波动很大，无论如何，创建密钥（1024 位）所需的时间为：683027ms，四舍五入到大约11 分钟< /strong> 创建密钥的

问题是：

是否有其他人得到相同的结果？
是否需要运行一些优化才能实现更低的时间？
（即生成 1024 位密钥）可能需要 18 秒到 30 分钟...）

测试已在 Nexus-One 手机上运行

提前感谢您对“问题”的一些说明

问候

原文

This is the code that I'm using to generate a DH keypair:

KeyPairGenerator keyGen = KeyPairGenerator.getInstance("DH");
keyGen.initialize(1024, new SecureRandom());
KeyPair ackp = keyGen.generateKeyPair();

(without the needed try/catch, of course).

I've done some tests running such code iteratively and varying the key size (in particular ramping up from 128 with a 128 step up to 1024. 1024 would be the desired size.

First of all, running each size generation 10 times to have some minimal std deviation on the results gives HIGH fluctuation of results, on average, anyway, the time needed for creating the keys (1024 bit) is: 683027ms, which rounds up to around 11 minutes for creating a key.

The questions are:

Is anyone else getting the same results?
Is there some optimization to be run in order to achieve lower times?
What is the high fluctuation dependent of? (i.e. for generating a 1024bit key it can take from 18 seconds to 30 minutes...)

Tests have been run on a Nexus-One phone

Thanks in advance for shedding some light on the "issue"

Regards

分享到QQ

分享到微博

如果你对这篇内容有疑问，欢迎到本站社区发帖提问参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。

发布评论

需要登录才能够评论，你可以免费注册一个本站的账号。

青春有你 2024-09-01 10:04:53

我做了一些进一步的编码/研究，显然最耗时（电池？）的调用是：

new SecureRandom()

不过，特别是，因为对于 DH 参数（g，p，l）可以预先计算和硬编码，它是明智的建议是提前这样做并使用生成的值来生成密钥对（这几乎是瞬时的）。

示例代码：

KeyPairGenerator keyGen = KeyPairGenerator.getInstance("DH");
keyGen.initialize(new DHParameterSpec(p, g, l));
KeyPair ackp = keyGen.generateKeyPair();

其中 p、g 和 l 为：

final BigInteger p = new BigInteger("X");
final BigInteger g = new BigInteger("Y");
final int l = 1023;

X 和 Y 可以通过以下方式离线生成：

AlgorithmParameterGenerator paramGen = AlgorithmParameterGenerator.getInstance("DH");
paramGen.init(1024, new SecureRandom());
AlgorithmParameters params = paramGen.generateParameters();
DHParameterSpec dhSpec = (DHParameterSpec)params.getParameterSpec(DHParameterSpec.class);
System.out.println("p: " + dhSpec.getP() + "\ng: " + dhSpec.getG() + " \nl: " + dhSpec.getL());

I did some further coding/research and apparently the call that's the most time (battery?) consuming is:

new SecureRandom()

In particular, though, since for DH the parameters (g, p, l) can be pre-computed and hard-coded it's a wise suggestion to do so beforehand and use the generated values to generate the key pair (which will be almost instantaneous).

Example code:

KeyPairGenerator keyGen = KeyPairGenerator.getInstance("DH");
keyGen.initialize(new DHParameterSpec(p, g, l));
KeyPair ackp = keyGen.generateKeyPair();

Where p, g, and l are:

final BigInteger p = new BigInteger("X");
final BigInteger g = new BigInteger("Y");
final int l = 1023;

And X and Y can be generated offline with:

AlgorithmParameterGenerator paramGen = AlgorithmParameterGenerator.getInstance("DH");
paramGen.init(1024, new SecureRandom());
AlgorithmParameters params = paramGen.generateParameters();
DHParameterSpec dhSpec = (DHParameterSpec)params.getParameterSpec(DHParameterSpec.class);
System.out.println("p: " + dhSpec.getP() + "\ng: " + dhSpec.getG() + " \nl: " + dhSpec.getL());

回复收藏 0 原文

~没有更多了~