> EC is typically far more computationally expensive than most other forms of asymmetric encryption

There is no EC encryption.

Reply to this note

Please Login to reply.

Discussion

No kidding? The following comment

> The goal of nip04 and 44 was to bring "asymmetric" encryption using ECDH

Yes. The goal of nip04 and 44 was to bring symmetric encryption using AES derived from a key exchange using ECDH. It's the AES doing the encryption.

If you're using RSA at all, usually by RNGing an AES key and using RSA to encrypt the AES key. And then use that to encrypt the clear text. So in both cases it's AES doing the encryption.

If you're comparing performance, the computational cost of encryption part using AES depends on the size of the clear text and is the same in both cases whereas the ECDH key exchange or the RSA encryption of the AES key are a once off.

You're right. I was being rude for no reason. I'm sorry. I'm assuming you only saw the shared context, not my reply? If it helps, I'm the author of the nip44 C reference implementation.

https://github.com/paulmillr/nip44/tree/main/c