The American Committee
Accredited Standards Committee X9 in April 2011 approved the use of the fastest asymmetric encryption algorithm NTRU (NTRUEncrypt). Surprisingly, the general public has never heard of such an algorithm before, but it is already becoming the technological standard for financial transactions, and it demonstrates
4 times faster performance than RSA due to good parallelization.
For example, the GTX280 graphics processor can perform up to 200,000 encryption operations per second with a 256-bit NTRU key. This is already comparable to symmetric keys, for example, it is only 20x slower than AES.
The approved standard
X9.98 describes the use of the
NTRU algorithm in financial applications. Here he will compete with RSA and
Elliptic Curve Cryptosystems (ECC). At the very least, Ed Adams, executive director of
Security Innovation , the owner of the rights and patents for the NTRU algorithm,
thinks so.
NTRU was invented back in the mid-90s. Unlike RSA, it was not widely adopted, because from the very beginning it was necessary to increase the strength and performance of this cipher. Now all the flaws are fixed and in practice the NTRU is already considered much faster than RSA. This fact is confirmed even by the specialists of RSA Labs, as well as independent research.
')
One of these comparative studies conducted cryptologists from the Catholic University of Leuven (Belgium). They found that when testing with the maximum security settings of the NTRU, it was four orders of magnitude faster than RSA and three orders of magnitude faster than ECC (
PDF ).
The RSA system would have been developed in the 70s, it is considered a more mature cryptographic technology and is used in many applications, and its reliability is beyond doubt, while the NTRU still needs to be closely studied. So it is unlikely that the transition to new standards will be quick. However, Adams is confident that his brainchild in the future may prove to be more reliable than RSA: he explains that the NTRU is based on a
lattice design , which potentially better resists computer attacks of the so-called "quantum type", that is, attacks using quantum computers.
Ed Adams says that in the future, a properly designed quantum computer will be able to hack both RSA and systems on elliptic curves. True, it is not yet known whether it is possible to assemble such a computer in practice, but financial institutions may become frightened and start migrating to a new standard right now. For example, NTRU is already using the EchoSat satellite provider for processing payments by IP protocol, and the entrepreneur is currently negotiating with Microsoft, McAfee and Symantec on the use of NTRU in their software products, in particular, in automatic update systems.
Of course, for true testing of the NTRU, it is necessary to publish the algorithm and source codes of the system. Security Innovation plans to finally do it in the summer.