Size Matters
Pick a key type and the key sizes for two certificate chains, generate them, and compare. Everything runs in your browser, so the timings are those of your own device.
What you are looking at
A chain is a root CA that signs an intermediate CA that signs a leaf certificate, with one key type per chain; root, intermediate and leaf may use different key sizes. Each certificate carries its subject's public key and the issuer's signature, so the sizes add up along the chain. The simulator builds real DER-encoded X.509 certificates with WebCrypto, and ML-DSA (the NIST post-quantum signature standard, FIPS 204) in pure JavaScript.
On the wire counts the leaf and the intermediate: that is what a server sends in a TLS handshake. The root is already in the client's trust store. Verification time is what your device needs for the two signatures a TLS client checks, the leaf's and the intermediate's; the root's self-signature is not checked.
Read the timings with care: RSA, ECDSA and Ed25519 run natively in your browser, ML-DSA runs in JavaScript, so its times are an upper bound. ML-DSA private keys are shown in their expanded form; stored as a 32-byte seed they are tiny.
Select two chains to compare
Loading…