[filleokus]

> Operation Time

> RSA key length (bits) Average time (seconds)

> 1024 16

> 2048 124

> 3072 600

> 4096 ~1000

That must be a typo, that they mean milli seconds - right? Otherwise this seems too slow to do anything useful?

[woodruffw]

That does seem exceptionally slow, although RSA key generation is also notoriously slow.

(In most settings where an HSM is used, you shouldn’t be generating keys all that often. So these times are often acceptable.)