Re: New multi6 draft: WIMP

[Iljitsch van Beijnum <iljitsch@muada.com>]

On 2-feb-04, at 12:30, Jukka Ylitalo wrote:

> A short hash chain generation is a quite fast operation compared to 
> signature calculation. (If I remember correct, e.g., computing SHA1 
> five times over a 160bit string takes under 0.5 ms with 2Ghz pentium.) 
> The operation is efficient and makes it more diffucult for an attacker 
> to cause a DoS situation.

Actually this is pretty poor. I seem to remember that a significantly 
slower Pentium can do 2000 DSA signature checks per second. Being able 
to bring down a host with just 2000 packets per second would be a very 
bad thing, as this is easily accomplished over 10 Mbps ethernet (approx 
500 byte packets).