Ecc use in certificates

I've done a little bit of extra digging for you. Chrome shared some data on the TLS working group mailing list last year which said:

....from the perspective of Chrome on Windows, across all ephemeral TCP TLS (1.2 and
1.3, excluding 1.2 RSA), the breakdown is roughly:
15% P256
3% P384
56% X25519
26% X25519+Kyber

That's last year, I think X25519+ML-KEM (replacing Kyber) is probably higher now. https://radar.cloudflare.com/adoption-and-usage says that cloudflare sees 40% "Post Quantum Encrypted", which means X25519+ML-KEM

I've confirmed with poster that RSA key exchange is under 1%, and FFDHE is about zero.

So approximately all key exchange involves elliptic curve DHE

8 Likes