Re: Elliptic Curve Cryptography algorithm for key exchange

From: Pent (pent)
Date: 10/30/03 

Date: Thu, 30 Oct 2003 10:03:21 -0500

Anything that needs better performance than current asymmetric algorithm
while providing the same strength?

http://www.certicom.com/resources/ecc/ecc.html

"[...] To successfully protect your data, a high security algorithm like AES
demands equivalent security for the accompanying digital signatures and key
exchanges. Otherwise, AES can be compromised through the weaker security of
your public key cryptography.
Normally, this would mean the large key sizes required to match AES levels
of security would overwhelm the processors of most mobile devices

Fortunately, ECC offers equivalent security to other competing technologies
but with much smaller key sizes. This enables faster computations, lower
power consumption and memory and bandwidth savings. This makes it ideal for
use in constrained, mobile device environments such as PDAs"

But it's also nice to have not only in mobile environments.

NSA adopted it recently:

http://www.fcw.com/fcw/articles/2003/1020/web-certicom-10-24-03.asp

"David Cross [MS]" <dcross@online.microsoft.com> wrote in message
news:u3ekguunDHA.3304@tk2msftngp13.phx.gbl...
> Currently, yes, that is the case. CryptoAPI does not support ECC.
>
> We would always be interested in knowing what application demands ECC
usage.
>
> --
>
>
> David B. Cross [MS]
>
> --
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
> http://support.microsoft.com
>
> <anonymous@discussions.microsoft.com> wrote in message
> news:092001c39e07$d861e5c0$a501280a@phx.gbl...
> > May I conclude from your answer that Microsoft CryptoAPI
> > doesn't support Elliptic Curve algorithms?
> >
> > Thank you
> > ---Original Message-----
> > >You need 3rd party implementation, such as:
> > >http://www.certicom.com/products/securitybuilder/securityb
> > uilder_crypto.html
> > >
> > >Crypto++ has some support:
> > >http://www.eskimo.com/~weidai/cryptlib.html
> > >
> > >"San" <san_ka@hotmail.com> wrote in message
> > >news:0c7101c39d58$123bd5e0$a401280a@phx.gbl...
> > >> Hi,
> > >> I was given a task to find how to use Elliptic Curve
> > >> algorithm for key exchange. Currently we use RSA and
> > >> Microsoft Enhanced provider for that.
> > >> Do any Microsoft CSP supports ECC?
> > >> Please advice where to start!
> > >> Should I have special Digital ID to use ECC? Where can I
> > >> get it?
> > >> Thanks in advance,
> > >>
> > >> San
> > >
> > >
> > >
> > >.
> > >
>
>

Relevant Pages

  • Re: is this double CBC?
    ... understand the difference between algorithm and implementation. ... the place of a cipher, and that it fails to meet the security requirements, therefore it is weak. ... if it was designed to work in place of a cypher, i wouldn't be using AES now would i. once again i will state, i didn't code the AES module, someone who knows cryptography better than i do coded it. ... You designed something that is not supposed to add to security, instead it is designed to consume entropy, and so significantly weakens security. ...
    (sci.crypt)
  • Re: is this double CBC?
    ... datatype of storage the algorithm can remain the same. ... going on to directly contradict yourself. ... if it was designed to work in place of a cypher, i wouldn't be using AES now ... Good to know your intention is to weaken security, ...
    (sci.crypt)
  • Re: what should "k-bit security" mean?
    ... but details of the application have subtle ways of leaking information ... Analysis of the algorithm. ... Here we verify the AES algorithm (*not* ... does it meet the security goals? ...
    (sci.crypt)
  • Re: RC4 on AMD64
    ... You are right, AES "has *NO* known security weaknesses", but this is ... AES had a very good analisys and it is really a good thing to convince ... I belive that until we cannot mathematically exclude that an algorithm ...
    (sci.crypt)
  • Re: Bijective - an explanation please?
    ... > DES gives better security than 3DES? ... You need to keep key sizes the same for both alternatives, ... AES in the second case. ...
    (sci.crypt)