Excessively slow table generation in ECC routines

UNCONFIRMED
Unassigned

Status

NSS
Libraries
UNCONFIRMED
3 years ago
3 years ago

People

(Reporter: watsonbladd, Unassigned)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

3 years ago
User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.91 Safari/537.36

Steps to reproduce:

Source code analysis of https://hg.mozilla.org/projects/nss/file/858493460699/lib/freebl/ecl/ecp_jm.c


Actual results:

Use of affine addition formulas


Expected results:

Batch inversion.

NSS fills the tables used for wNAF scalar multiplication by using the affine point addition formulas, instead of more efficient projective ones and batching an inversion to convert back to affine. This is a significant difference in performance, due to the slowness of inversion.
You need to log in before you can comment on or make changes to this bug.