5.6.3 Elliptic-Curve Cryptography (ECC)

Elliptic-curve cryptography represents a more recent evolution of public-key systems that achieves equivalent security to RSA with much smaller key sizes. ECC derives its strength from the elliptic-curve discrete logarithm problem (ECDLP)—the difficulty of determining an integer k given two points P and Q such that:

Q = k P

(5.14)

on a suitably chosen elliptic curve. For appropriately defined parameters, no efficient algorithm is known to solve this problem, making ECC highly resistant to brute-force or mathematical attacks.

An elliptic curve over a finite field F_p is defined by an equation of the form:

y^{2} m o d (p) = (x^{3} + a x + b) m o d (p)

(5.15)

where 4a²+27b²≠ 0 ensures that the curve has no singularities.

Each point (P = (x , y) on the curve has an inverse –P = (x, –y), and points may be added using well-defined geometric rules. Repeated addition defines scalar multiplication, the basis of all elliptic-curve cryptographic operations.

To generate an ECC key pair:

Select a standard curve and base point 𝐺 (as defined in standards such as NIST FIPS 186-5 or IEEE P1363).
Choose a random integer 𝑑 as the private key.
Compute the public key as:

Q = d G

(5.16)

Knowledge of Q and G does not reveal d without solving the ECDLP.

Advantages of ECC. The primary advantage of ECC is its efficiency: for comparable security levels, ECC keys are roughly one-tenth the length of RSA keys. For example, a 256-bit ECC key provides security equivalent to a 3,072-bit RSA key. This reduction yields faster computations, lower memory and bandwidth requirements, and reduced power consumption—attributes that make ECC especially attractive for mobile devices, IoT systems, and embedded applications. Elliptic-curve cryptography therefore provides the same fundamental services as RSA—encryption, digital signatures, and key exchange—but with significantly shorter key lengths and greater computational efficiency.

Application of ECC. ECC underpins many modern cryptographic protocols, including Transport Layer Security (TLS 1.3), Signal’s Curve25519 key exchange, X3DH, and blockchain digital-signature schemes such as Bitcoin’s secp256k1 curve.