8
$\begingroup$

So I made my own serial key generation software, using ECDSA, for use in my own applications and it works great so far! To keep the serial key short enough I use a 128 bit EC curve. My final signature (which I use as the product key) ends up containing two BigIntegers, 128-bit each, so the final key ends up being 32 bytes long. This is an ok solution and I can get my final key down to about 50 characters (not counting any delimiters like dashes) by doing some custom base conversion to convert this into a readable string.

Now I found a software called ellipter where the key for a 128 bit key strength only ends up being 30 characters (if you look at the screenshots on their page). Is this even possible? Or are they using a 64-bit curve? I can't understand how they do it. I would love to get my keys shorter also but I can't see how it can be possible?

$\endgroup$
3
  • 1
    $\begingroup$ Perhaps they implemented BLS signatures. They only produce 2*n bit signatures for n bits of security, compared with 4*n bit signatures with ECDSA. There are also variants of Schnorr/DSA signatures that only produce 3*n bit signatures. $\endgroup$ Commented Mar 20, 2015 at 18:10
  • 1
    $\begingroup$ Do they not say what algorithm they use? If they don't, I would be very wary about trusting that they're actually providing proper security. $\endgroup$
    – cpast
    Commented Mar 20, 2015 at 18:53
  • $\begingroup$ They say they use elliptic curves on the page. It's strange, their public and private keys seems to be about the size I get so that indicates they are not using a much smaller curve. But how they get their key so short I still don't understand. $\endgroup$
    – Johan O
    Commented Mar 21, 2015 at 7:54

1 Answer 1

1
$\begingroup$

The web site of https://ellipter.com says, they are using encryption.

$\endgroup$
2
  • $\begingroup$ It seems that they do, but could you add how this explains the short product keys? $\endgroup$
    – otus
    Commented Oct 3, 2015 at 6:04
  • 1
    $\begingroup$ I don't know what encrytion algorithm is really used. But if its, for instance, ECIES, then the minimum cipher size is the blocklength of the underlying symmetric cipher (e.g. 128 bit for AES). $\endgroup$
    – user27950
    Commented Oct 3, 2015 at 7:06

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.