The Idea
Elliptic curve cryptography, ECC, is asymmetric cryptography built on the algebra of points on a special curve. Its security comes from the elliptic curve discrete logarithm problem, which is very hard to reverse.
Why Smaller Keys
ECC reaches the same security level as RSA with much shorter keys. A 256 bit elliptic curve key offers protection comparable to a 3072 bit RSA key.
- Smaller keys mean less storage and bandwidth.
- Operations are faster, which helps mobile and embedded devices.
- Popular curves include named standard curves chosen for safety and speed.
Where It Is Used
ECC appears in key exchange and digital signatures. The signature variant signs messages compactly, and the key agreement variant lets two sides derive a shared secret. Most modern secure connections now prefer elliptic curve methods over RSA for the handshake.
Key idea
Elliptic curve cryptography achieves the same strength as RSA with far smaller and faster keys by relying on the hardness of the elliptic curve discrete logarithm, which is why modern handshakes and signatures favor it.