ECC stands for Elliptic Curve Cryptography. Elliptic curves are a mathematical structure which allow to define cryptographic operations on them.
0
votes
2answers
142 views
Why don't more websites implement Perfect Forward Secrecy?
From what I understand, all it takes to enable PFS on a webserver is adding ephemeral cipher suites (ones that use DHE and ECDHE for the key exchange) to the list of cipher suites used in SSL/TLS ...
1
vote
0answers
13 views
Implementation of ECC MQV
I am looking for a free/open source implementation of the ECC MQV algorithm (preferably in Java) or a library that implements it, but Google is failing me. Help please?
1
vote
1answer
245 views
OpenSSL ECC named curve support
I tried searching online but can't seem to find whether or not OpenSSL support both NamedCurve.arbitrary_explicit_prime_curves and NamedCurve.arbitrary_explicit_char2_curves? As far as I can tell ...
1
vote
1answer
480 views
ECC Brainpool Standard Curves and Curve Generation with Bouncy Castle which seed to use?
I want to implement a ECC Key Agreement with a Brainpool curve brainpoolP512r1 or brainpoolP512t1.
I'm not clear about whichseed value to use (and how).
In this document ...
5
votes
1answer
363 views
Can custom elliptic curves be used in common TLS implementations?
Recent developments have cast some doubt on the elliptic curves specified by NIST and used in many standards like TLS (for signatures with ECDSA and key agreement with ECDHE).
It seems like the ...
6
votes
2answers
373 views
ECC based Client Certificate import in Chrome/Mozilla in windows
I have deployed a PKI server and successfully able to generate the ECC based user or client certificates. but non of the web browser support ECC as public key. I have tried different tools and also ...
2
votes
1answer
212 views
What is the optimal result for the elliptic curve patent issue?
I saw an article this morning, discussing the fact that RSA and DH may be significantly less secure in the upcoming five years. Although the chance that this will materialize is small, I immediately ...
4
votes
1answer
298 views
Why was ECMVQ dropped from NSA Suite B?
I've found two mentions on Wikipedia that Elliptic Curve Menezes–Qu–Vanstone (ECMVQ) was dropped from NSA's Suite B however they seem to imply different reasons. One mention is preceded by talk of how ...
0
votes
1answer
262 views
What are the performance and security tradeoffs when selecting “ECC” or “Subgroup” in a U-Prove token?
In one of the U-Prove documents, I remember reading something that compared Subgroups versus ECC and it went something like this (paraphrased):
Subgroups
Requires a bigger key to achieve equivalent ...
1
vote
1answer
269 views
Advantages of using a Digital Signature Scheme (DSS) with Appendix instead of DSS giving Message Recovery
I've been looking at the EMV draft specification (pdf) for using Eliptic Curve Cryptography in payment cards instead of the currently used RSA. One thing I've noticed is that they've moved from using ...
4
votes
1answer
140 views
RFC 6637: Algorithm-Specific Fields for ECDH
I am trying to integrate RFC 6637 into Bouncy Castle C# which is more challenging as initially thought because both private key and public key have to be present to calculate the share secret: that ...
10
votes
1answer
3k views
ECC in (Open)PGP
How is with the support for ECC (Elliptic Curve Cryptography) in (Open)PGP so far? It seems that GnuPG (The GNU Privacy Guard) doesn't have an official implementation - but I did find the gnupg-ecc ...
4
votes
1answer
604 views
Why is ECC more vulnerable than RSA in a post-quantum world?
Forgive me if this should be in the crypto sub, but sometimes the answers there are very mathematical and I would rather have an answer which is a bit lighter on the math but still strong on the tech ...
2
votes
1answer
1k views
What elliptic curves are supported by browsers?
Wireshark'ed Firefox 3 request. Their names are nowhere documented.
Elliptic curve: secp256r1 (0x0017)
Elliptic curve: secp384r1 (0x0018)
Elliptic curve: secp521r1 (0x0019)
What are the supported ...
3
votes
2answers
996 views
Using Elliptic Curve Cryptography
I am wondering if ECC could be used the way that the data is encrypted with the public key instead of the random generated key.
Is there any advantage doing that comparing to the "traditional" way of ...
3
votes
2answers
312 views
Why is Elliptic Curve Cryptography not used much outside of government? [closed]
It seems that Elliptic Curve Cryptography, being required by the US government, is not being used outside of the government. Why is this? And why does the government support it's use for government?
...
19
votes
3answers
13k views
What is ECDHE-RSA?
What is the difference between ECDHE-RSA and DHE-RSA?
I know that DHE-RSA is (in one sentence) Diffie Hellman signed using RSA keys. Where DH is used for forward secrecy and RSA guards against MITM, ...
18
votes
5answers
2k views
Can ECC be used without infringing on patents?
Can ECC (Elliptic Curve Cryptography) be safely used without infringing on Certicom's patents?
I would like to make use of ECC in an embedded system to establish a secure channel. But, I am concerned ...
