ECC

What is ECC (Elliptic Curve Cryptography)?

Elliptic Curve Cryptography (ECC) is an algorithm which can be used as an alternative for RSA (RSA is currently the most used algorithm for SSL). ECC keys are harder to crack compared to RSA keys, which in return makes them safer. ECC keys are shorter than RSA keys (in comparison; An ECC key consisting of 224 bit is equal to a RSA key of 2048 bit). Due to the ECC keys being smaller the secure connection can be established much faster, less bandwidth is also used. Modern browsers are more than capable of running ECC certificates, both desktops/laptops and mobile devices. Due to the ECC keys using less physical space the CPU demand and power consumption on servers are lower.

Requesting an ECC SSL certificate

By default every Certificate_Authority (CA) issues certificates with RSA keys. Sectgio (Comodo) also issues ECC certificates. To request an ECC certificate from Comodo, you will need to use an ECC CSR while requesting the certificate.

Symantec also offers some ECC options.  When ordering Symantec Pro certificates, an ECC certificate will be issued alongside the RSA certificate. The following products come with an ECC certificate:

• Secure Site Pro
• Secure Site Pro EV

Order SSL certificate

There are currently two manuals available that show you how to generate an ECC CSR. This can be done in the MMC or by using OpenSSL.

Because of the obvious advantages, we expect that more CA's will soon start issuing ECC certificates.

What are the minimum requirements for clients?