Size Matters
Pick a key type and the key sizes for two certificate chains, generate them, and compare. Everything runs in your browser, so the timings are those of your own device.
What you are looking at
A chain is a root CA that signs an intermediate CA that signs a leaf certificate, with one key type per chain; root, intermediate and leaf may use different key sizes. Each certificate carries its subject's public key and the issuer's signature, so the sizes add up along the chain. The simulator builds real DER-encoded X.509 certificates with WebCrypto, and ML-DSA (the NIST post-quantum signature standard, FIPS 204) in pure JavaScript.
Verification time is the time your device needs to check all three signatures. Servers and browsers do this for every TLS handshake.
Select two chains to compare
Loading…