What IS Eliptic Curve Cryptography (ECC)


The History and Benefits of ECC CertificatesThe constant back and forth between hackers and security researchers, coupled with advancements in cheap computational power, results in the need for continued evaluation of acceptable encryption algorithms and standards. RSA is currently the industry standard for publickey cryptography and is used in the majority of SSL/TLS Certificates. A popular alternative, first proposed in 1985 by two researchers working independently (Neal Koblitz and Victor S. Miller), Elliptic Curve Cryptography using a different formulaic approach to encryption. While RSA is based on the difficulty of factoring large integers, ECC relies on discovering the discrete logarithm of a random elliptic curve. In other words, ECC works on the assumption that while it is possible to compute a point multiplication, it is conversely almost impossible to compute the multiplicand given only the original and product points. The difficulty can be dramatically ramped up with the size of the elliptic curve. Key BenefitsBelow are a few of the benefits to using ECC Certificates. Stronger KeysSmall ECC keys have the equivalent strength of larger RSA keys because of the algorithm used to generate them. For example, a 256bit ECC key is equivalent to a 3072bit RSA key and a 521bit ECC key is equivalent to a 15,360bit RSA key! These strong, small keys allow encryption to stay ahead of computing power without having to simply create longer keys. Smaller Certificate SizeBecause of the smaller key size with an ECC certificate, less data is transmitted from the server to the client during the SSL handshake. ECC certificates also requires less CPU and memory, increasing network performance and making a potentially large difference on highvolume or hightraffic sites. Is ECC Right for You?While ECC has some benefits, there are also major drawbacks that you should consider before moving to ECC. Most importantly, not all browsers and servers support ECC certificates and support in mobile platforms has not been thoroughly tested. Another concern is that while ECC is faster overall, the ECC signature verification can be a computationally intensive task and may be slower than RSA on some devices. To have a more indepth discussion on ECC or for help deciding if it is right for you, contact us. How Do I Get an ECC Certificate from COMODO?Once you decide that you want an ECC certificate, ordering one from COMODO is as easy as generating an ECC CSR (Certificate Signing Request) to submit with your order. Below are instructions to create an ECC CSR for popular operating systems.
 
