ECC HIP

8
ECC HIP ECC HIP Oleg Ponomarev IETF76

description

ECC HIP. Oleg Ponomarev IETF76. RSA vs ECC. Comparable Key Sizes (in bits). draft-ponomarev-hip-ecc-00. 2.1. DIFFIE_HELLMAN The following additional Group IDs MAY be used: 192-bit Random ECP Group | secp192r1 | 7 - PowerPoint PPT Presentation

Transcript of ECC HIP

Page 1: ECC HIP

ECC HIPECC HIP

Oleg Ponomarev

IETF76

Page 2: ECC HIP

RSA vs ECCRSA vs ECC

Symmetric ECC DH/DSA/RSA

80 160 1024

112 224 2048

192 384 7680

256 512 15360

Comparable Key Sizes (in bits)

Page 3: ECC HIP

draft-ponomarev-hip-ecc-00draft-ponomarev-hip-ecc-00

2.1. DIFFIE_HELLMAN

The following additional Group IDs MAY be used:

192-bit Random ECP Group | secp192r1 | 7

224-bit Random ECP Group | secp224r1 | 8

256-bit Random ECP Group | secp256r1 | 9

384-bit Random ECP Group | secp384r1 | 10

521-bit Random ECP Group | secp521r1 | 11

The groups are defined in RFC 5114

Page 4: ECC HIP

draft-ponomarev-hip-ecc-00draft-ponomarev-hip-ecc-00

2.2. HOST_ID

The following additional algorithm MAY be supported by the Host Identity Protocol Implementations

Algorithms Values

------------------------------------------------------

ECC 4 (OPTIONAL)

Page 5: ECC HIP

Performance EstimationsPerformance Estimations

Host ID Session BE/s

RSA1024 DH1536 145

RSA1024 ECDH192 425

ECDSA160 ECDH192 639

RSA Host ID, but ECDH?

Page 6: ECC HIP

NIST Recommendation from 2011NIST Recommendation from 2011

Host ID Session BE/s

RSA2048 DH2048 45

RSA2048 ECDH224 89

ECDSA224 ECDH224 374

ECC please

256 bytes

28 bytes

Page 7: ECC HIP

N810 Internet TabletN810 Internet Tablet

Host ID Session BE

RSA1024 DH1536 275 ms

RSA1024 ECDH192 39 ms

ECDSA160 ECDH192 33 ms

RSA2048 DH2048 747 ms

RSA2048 ECDH224 187 ms

ECDSA224 ECDH224 129 ms

Page 8: ECC HIP

Questions, Comments?Questions, Comments?

[email protected]