ECC

What Is ECC?

Elliptic Curve Cryptography (ECCECCCryptographyEfficient public-key cryptography using elliptic curves.Click to view →) is a public-key cryptographic system based on the algebraic structure of elliptic curves over finite fields. ECC provides the same security guarantees as RSA -- digital signatures, key agreement, and encryption -- but with dramatically shorter key lengths, making it the preferred asymmetric algorithm for modern smart card platforms where EEPROM storage, processing power, and transaction time are constrained.

A 256-bit ECC key provides security equivalent to a 3072-bit RSARSACryptographyPublic-key algorithm for smart card signatures and key exchange.Click to view → key, enabling faster operations, smaller certificates, and lower power consumption on contactless cards powered by RF energy harvesting.

ECC Algorithms on Smart Cards

Named Curves

Smart card standards specify particular named curves:

Hardware Implementation

Modern smart card crypto coprocessors include dedicated ECC accelerators that perform point multiplication in 30-100 ms for P-256, compared to 50-200 ms for RSA-2048. For contactless transactions where the card is powered by the RF field for less than 500 ms, this performance difference is often decisive.

Migration from RSA to ECC

The smart card industry is systematically migrating from RSA to ECC:

• ePassport -- ICAO 9303ICAO 9303ComplianceICAO standard for ePassport chip data and security protocols.Click to view → now mandates ECDSA for Active Authentication in new documents.
• EMV -- EMVCoEMVCoStandardBody managing EMV payment standards.Click to view → is transitioning from RSA-based SDA/DDA to ECC-based CDA for next-generation payment cards.
• GlobalPlatform -- SCP03SCP03SoftwareAESAESCryptographyNIST symmetric block cipher for smart card encryption.Click to view →-based secure channel protocol.Click to view → already uses AES for symmetric operations; SCP11 adds ECC-based key agreement for mutual authentication.
• Government cards -- NIST SP 800-78-5 for PIV allows ECC P-256 and P-384 alongside RSA.

The migration driver is not just performance -- ECC's shorter key and signature sizes reduce certificate storage requirements on cards with limited EEPROM, enabling more applications on multi-application platforms managed by GlobalPlatform.