Right now all of our root and intermediate keys use RSA. We’re planning to generate ECC keys and make an ECC option available to subscribers in 2016.

Yes, at that moment there wasn’t support in Boulder yet. But now that there is support, one could implement it in the client. And no, why should it be mentioned in the issue? It’s clearly an issue in the letsencrypt / letsencrypt section, not in letsencrypt / boulder or somewhere else …

I hope you’ll expand the supported elliptic curves to better ones like Curve25519 when they are finally support in current Browsers, because currently only some curves from the NSA Suite B are supported and they may be a bit flawed . If you follow these links and click a it through you can also find …

From the Let’s Encrypt side of things, they’ll have to wait until the CA/B Forum permits other curves to bring them live. Right now section 6.1.5. of the Baseline Requirements limit all compliant CAs to the NIST curves. This is also reiterated in Let’s Encrypt’s CPS.

Okay. But when the curves are supported in the browser I assume it might not take long until it is also included in the CA/B Baselines.

Baseline_Requirements_V1_3_1.pdf 512.93 KB 6.1.5 Page 29 here are three EC types listed namely P‐256, P‐384 and P‐521 But the P-521 was rejected currently be LE. And from the link ( openssl - Which elliptic curve should I use? - Information Security Stack E…

secp521r1 is also the only ECC curve which has equal strength to 256 bits AES… As encryption is only as strong as its weakest link, by disabling secp521r1, the use of 256 bits symmetric ciphers isn’t optimal: secp384r1 only provides security equal to a symmetric cipher of 192 bits. In effect, you’r…

[image] jcjones: It's not supported in Chrome, though. Chrome isn't the only browser out there as far as I've checked. :wink:

[image] jcjones: Speaking of, to quote rlb, "We need a caniuse.com for crypto." The first thing we'd need there would at least be a listing of supported TLS protocol versions . Afterwards we can think about elliptical curves: Add supported elliptical curves (…

Currently, the specification for EdDSA certificates (and Curve25519 ECDH for TLS) is under development by the IETF CURDLE WG. It’s going to be a long road until it’s ready for deployment; first the specification needs to get, well, not necessarily done, but stable enough that it can be implemented (…

Elliptic Curve Cryptography (ECC) Support

Feature Requests

jcjones January 20, 2016, 9:24pm 108

It’s not supported in Chrome, though.

Speaking of, to quote rlb, “We need a caniuse.com for crypto.”

Topic		Replies	Views
ECDSA testing on staging	73	27956	July 15, 2016
"EC XXX bits (SHAXXXwithRSA)" versus "EC XXX bits (SHAXXXwithECDSA)"? What's the difference? Does it matter? Issuance Tech	24	6047	August 5, 2022
Should we be defaulting to ECC keys now? Client dev	27	1734	July 22, 2024
Feedback requested: what's standing between you and ECDSA? Site Feedback	22	753	September 27, 2024
Let's Encrypt new hierarchy plans Issuance Tech	29	10481	August 13, 2020

Elliptic Curve Cryptography (ECC) Support

Related topics