Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.
Sign up to join this community
I'm implementing a simple door access control with smart keyfobs. At the moment I send a 32 byte message to the keyfob which it signs with ECDSA and I verify the authenticity with the public key.
There would also be the possibility to send an encrypted message to the card and let it decrypt it.
Which of the two methods is more practicable or more common? (secure?)
In public key cryptography you perform authentication by signing a message that the other end verifies it using your public key.
Since in your case you only need to authenticate, this is exactly what you need.
