Take the 2-minute tour ×
Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It's 100% free, no registration required.

I'd like to know how much bigger is the ciphertext when encrypting a message using ECC encrytpion? ECIES (or ElGamal)

share|improve this question
    
Arent EC Elgamal and ECIES the same thing? –  mikeazo Nov 14 '13 at 18:05
    
sorry if i made a mistake (: –  user54319 Nov 14 '13 at 18:17
    
@mikeazo Actually not really. ElGamal is purely asymmetric and ECIES is a hybrid encryption scheme. –  DrLecter Nov 14 '13 at 18:45
    
i'd like to know how larger the cipher text is? in any of the above. percentage wise. thank u in advance –  user54319 Nov 14 '13 at 18:50
    
You may look here. In ECIES, the ciphertext size is one point of the curve + the size of the encrypted message (+ small overhead of padding for the symmetric cipher) + the tag length of the used MAC. ElGamal is not really useful for larger messages and when using ElGamal in the elliptic curve setting hashed ElGamal should be your choice (as you avoid cumbersome mapping of messages to points on the curve)... –  DrLecter Nov 14 '13 at 19:00

1 Answer 1

up vote 2 down vote accepted

Ok, I sum it up.

In ECIES, which is a hybrid encryption scheme, the ciphertext size is one point of the curve + the size of the encrypted message (size of the message + small overhead of padding for the symmetric cipher) + the tag length of the used MAC. As CodesInChaos pointed out, if you work on a 256 bit curve (giving 128 bit security), then using point compression this will amount to 32 byte (and 64 otherwise) for the elliptic curve point and as he mentioned in addition to the ciphertext and the MAC some little overhead for the format.

A Note on ElGamal (as in the original Question): ElGamal is not really useful for larger messages and when using ElGamal in the elliptic curve setting hashed ElGamal should be your choice (as you avoid cumbersome mapping of messages to points on the curve). You could also use a hybrid version of ElGamal to achieve a hybrid cryptosystem like ECIES does.

But ECIES is standardized and provides better security (IND-CCA) as the ElGamal versions (only IND-CPA).

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.