Performance analysis of elliptic curve cryptography for SSL

ABSTRACT

Elliptic Curve Cryptography (ECC) is emerging as an attractive public-key cryptosystem for mobile/wireless environments. Compared to traditional cryptosystems like RSA, ECC offers equivalent security with smaller key sizes, which results in faster computations, lower power consumption, as well as memory and bandwidth savings. This is especially useful for mobile devices which are typically limited in terms of their CPU, power and network connectivity. However, the true impact of any public-key cryptosystem can only be evaluated in the context of a security protocol. This paper presents a first estimate of the performance improvements that can be expected in SSL (Secure Socket Layer), the dominant security protocol on the Web today, by adding ECC support.

REFERENCES

• 1: IDC, "IDC envisions a time when majority of Internet access will be through wireless devices", see http://www.idc.com:8080/communications/press/pr/CM041000pr.stm
• 2: A. Frier, P. Karlton and P. Kocher, "The SSL3.0 Protocol Version 3.0", see http://home.netscape.com /eng/ssl3/.
• 3: S. Blake-Wilson and T. Dierks, "ECC Cipher Suites for TLS", Internet draft: draft-ietf-tls-ecc-01.txt, work in progress, Mar.\ 2001.
• 4: NIST, "Recommended Elliptic Curves for Federal Government Use", July 1999, see http://csrc.nist.gov/csrc/fedstandards.html.
• 5: Victor S Miller, Use of elliptic curves in cryptography, Lecture notes in computer sciences; 218 on Advances in cryptology---CRYPTO 85, p.417-426, June 1986, Santa Barbara, California, United States
• 6: N. Koblitz, "Elliptic curve cryptosystems", Mathematics of Computation, 48:203-209, 1987.
• 7: ANSI X9.62, "The Elliptic Curve Digital Signature Algorithm (ECDSA)", American Bankers Association, 1999.
• 8: ANSI X9.63, "Elliptic Curve Key Agreement and Key Transport Protocols", American Bankers Association, 1999.
• 9: T. Dierks and C. Allen, January 1999. "The TLS Protocol - Version 1.0.", IETF RFC 2246, see http://www.ietf.org/rfc/rfc2246.txt
• 10: The OpenSSL Project, see http://www.openssl.org/.

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.4 PERFORMANCE OF SYSTEMS
      Subjects: Measurement techniques

Additional Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.2 Network Protocols
          Subjects: Applications (SMTP, FTP, etc.)

  E. Data
  E.3 DATA ENCRYPTION
      Subjects: Public key cryptosystems

General Terms:
Performance, Security

Keywords:
elliptic curve cryptography (ECC), internet security, secure socket layer (SSL), wireless