Right now all of our root and intermediate keys use RSA. We’re planning to generate ECC keys and make an ECC option available to subscribers in 2016.

[image] Osiris: From: https://blog.joelj.org/dual-rsaecdsa-certificates-in-apache-2-4/ Ofcourse you'll probably also need OpenSSL 1.0.2. The blog mentions some strange things about the intermediate certificate string with 1.0.1.. sweet thanks for thank info.. nice read :slight_smile:

by the way, another small question; how should EC keysizes be selected? is there some kind of rule of thumb like “half the size of the RSA key” or whatever to get an EC key with similar security as an RSA key with a chosen size?

EC keys can be 256, 384, and 521 bits. Using 521 can break compatibility, you should choose between 256 and 384. 256 is equal to 128-bit symmetric encryption. Most of the time I use 384, but it’s just for 100% key exchange on SSL Labs, not really smart.

oh there are size restrictions. I will certainly take the highest, because it’s a site only I use anyway (prass-protected) and I am overdriving the security anyway (16384 bit RSA cert is what I use now) but why 521? 256 is the result of 2^8 and 384 is 128+256, 521 looks kinda weird…

I just use ECC 256bit it's equivalent to RSA 3072bit :slight_smile: FYI, ECC needs adequate levels of system entropy on your servers too .. more so if you're on virtualized and headless VPS servers [image] A (Relatively Easy To Understand) Primer on Elliptic Curve Cryptography Elliptic…

[quote="jsha, post:21, topic:34, full:true"] As with so many questions, the answer is: we're trying to focus our offerings on one thing and launch that, then expand incrementally from there.[/quote] Makes sense. [quote="jsha, post:21, topic:34, full:true"] In order to offer ECDSA certs, we will …

[image] Osiris: CSR's with ECDSA public keys can be signed with a RSA private key like the current Let's Encrypt Intermediate certificates.. This is a good point, I forgot about this. Thanks! So the main obstacle for these hybrid certs would be adding a GoodKeyECDSA function to provide simila…

[image] My1: nah I go as far as I can. especially if I am the only one who uses it anyway. your SSL negotiation times will suffer and thus page load speeds as you go higher see Benefits of Elliptic Curve Cryptography | PKI Consortium at ECC 256bit = RSA 3072bit at ECC 512bit = RSA 15360bit …

This is related to Mersenne primes . Maybe, for such a big size it’s faster than 512.

Elliptic Curve Cryptography (ECC) Support

Feature Requests

My1 November 29, 2015, 8:18pm 30

nah I go as far as I can. especially if I am the only one who uses it anyway.

Topic		Replies	Views
ECDSA testing on staging Uncategorized	73	28155	July 15, 2016
"EC XXX bits (SHAXXXwithRSA)" versus "EC XXX bits (SHAXXXwithECDSA)"? What's the difference? Does it matter? Issuance Tech	24	6580	August 5, 2022
Should we be defaulting to ECC keys now? Client dev	27	1928	July 22, 2024
Feedback requested: what's standing between you and ECDSA? Site Feedback	22	922	September 27, 2024
Let's Encrypt new hierarchy plans Issuance Tech	29	10576	August 13, 2020

Elliptic Curve Cryptography (ECC) Support

Related topics