LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 04-26-2011, 11:11 PM   #1
dman777
Member
 
Registered: Dec 2010
Distribution: Gentoo
Posts: 232

Rep: Reputation: 8
If ECC is stronger than symmetric, then why is does the key need to be more bits?


Quote:
One of the asymmetric algorithm types, elliptic curve cryptography, or ECC, appears to be secure with shorter keys than those needed by other asymmetric key algorithms. NIST guidelines state that ECC keys should be twice the length of equivalent strength symmetric key algorithms. So, for example, a 224-bit ECC key would have roughly the same strength as a 112-bit symmetric key. These estimates assume no major breakthroughs in solving the underlying mathematical problems that ECC is based on. A message encrypted with an elliptic key algorithm using a 109-bit long key has been broken by brute force.
I am a little confused. If ECC is stronger and can use a smaller bit key than a symmetric algorithm, why would a larger ECC key that is 224-bit have the same strength as a smaller 112 bit symmetric key?
 
Old 04-27-2011, 12:11 AM   #2
Berhanie
Senior Member
 
Registered: Dec 2003
Location: phnom penh
Distribution: Fedora
Posts: 1,625

Rep: Reputation: 165Reputation: 165
Quote:
If ECC is stronger and can use a smaller bit key than a symmetric algorithm
Not a smaller key than a symmetric key algorithm, but rather an asymmetric one.
According to this, you'd need a 2048-bit rsa (asymmetric) key to have the strength equivalent to an 112-bit symmetric key. In your quote, you mention that ECC can do the same with only a 224-bit key. This means that ECC keys are much smaller than RSA keys of the same strength.
 
Old 04-27-2011, 12:22 AM   #3
dman777
Member
 
Registered: Dec 2010
Distribution: Gentoo
Posts: 232

Original Poster
Rep: Reputation: 8
Ok, I see. Thanks. Curiouse....can I use ECC to encrypt a filesystem instead of AES? And since ECC is asymmetric and AES is symmetric does this mean AES is stronger/more secure/better?
 
Old 04-27-2011, 04:39 AM   #4
Noway2
Senior Member
 
Registered: Jul 2007
Distribution: Gentoo
Posts: 2,125

Rep: Reputation: 781Reputation: 781Reputation: 781Reputation: 781Reputation: 781Reputation: 781Reputation: 781
The blog on this link summarizes it pretty well. Symmetric and asymmetric keys are typically used for different purposes. One of the challenges that Asymmetric keys solve is how to initiate secure communications in an unsecured channel. An example would be establishing an SSH or VPN connection. Some method is needed to authenticate the clients and allow them to begin secure communications without divulging secure information in the clear. The Diffie-Hellman algorithm is an example of how this is done using asymmetric keys. Once the communications has been established, a change is generally made to symmetric keys, which are computationally faster.

Generally speaking, a symmetric key of X bits will be considered equivalent to an asymmetric key of Y bits, with X being less than Y.
 
Old 04-27-2011, 01:05 PM   #5
Berhanie
Senior Member
 
Registered: Dec 2003
Location: phnom penh
Distribution: Fedora
Posts: 1,625

Rep: Reputation: 165Reputation: 165
Quote:
And since ECC is asymmetric and AES is symmetric does this mean AES is stronger/more secure/better?
more secure? not yet, but possibly in the future. read the relative effects on quantum computing on asymmetric and symmetric ciphers in the wikipedia link i mentioned. but, symmetric ciphers are less computationally intensive than asymmetric ones, so you need a good reason to use an asymmetric cipher in the first place, such as key exchange as Noway2 mentions.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Button of Xchat on Slackware 13.1 in 64 bits and 32 bits Laodiceans Slackware 1 06-21-2010 05:32 PM
Can I install Linux 32 bits on system 64 bits? miros84 Linux - Software 7 01-06-2010 07:49 AM
Things to consider when compiling C using 32 bits instead of 64 bits processors rpomerleau Programming 2 07-08-2008 01:22 PM
How to change MAC address from 48 bits to 32 bits? cywong.digi Linux - Networking 1 09-05-2007 09:28 AM
32 bits version distros running 64 bits CPU javb Linux - General 4 04-02-2006 07:21 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 02:37 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration