* Ralf Hildebrandt <ralf.hildebra...@charite.de>: > I can recommend this PDF: > http://blogs.sun.com/jyrivirkki/resource/ECC-TLS-BOF-6958.pdf > und dies hier in Deutsch: > http://www.weblearn.hs-bremen.de/risse/papers/IIAkolloq080115/elliptic.pdf > > Short: The 2007 PDF says that the best known attacks against ECC are > "worse" than for RSA, DSA, DH. > Thus one can use shorter key lenghts giving the same level of security.
Incidentially, I recompiled Postfix against opensssl-1.0 yesterday :) I still have to find out if the DFN-PKI-CA (which we're using) is issuing certs on ECC keys I could just try that :) Like... now :) -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebra...@charite.de | http://www.charite.de