Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

When can a decryption function detect that the ECC key I use for decryption is incorrect? Is it possible to do that during initialization, or does the complete message have to be decrypted to do that?

share|improve this question
Do you have the public key? This would let you detect that the (private) decryption key is invalid, without even the message. Otherwise: what ECC encryption scheme is used? – fgrieu Apr 5 '13 at 19:56
Typically ECC is not used for encryption at all. It's only used to determine a symmetric key that's used with a symmetric cipher to do the actual encryption. Your question depends on the choice of the symmetric encryption scheme and on the nature of the plaintext. – CodesInChaos Apr 7 '13 at 12:30
I'm programming a bitmessage client, it uses asymetric cryptography only for messages. – Sibbo Apr 18 '13 at 11:16
@Sibbo bitmessage uses ECIES. This means that ECC is used to produce a shared key, which is then used for encryption (AES-CBC) and MAC (HMAC-SHA-256). A wrong key will lead to a MAC verification failure. – CodesInChaos Mar 5 '14 at 12:30

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.