15
$\begingroup$

As the topic says, since when can ECC cryptography be freely used?

Is it not widely used because of patents? There is no alternative to it on embedded devices and smart cards.

Just to mention: I am not from the USA. I'm a simple user who wants ECC to be wide supported.

Improve this question
$\endgroup$
3
  • 1
    $\begingroup$ A lot depends on how ECC is used. Most patents cover specific aspects which many implementations don't use at all. $\endgroup$
    – CodesInChaos
    Feb 27, 2013 at 14:35
  • 3
    $\begingroup$ See Can ECC be used without infringing on patents? $\endgroup$
    – CodesInChaos
    Feb 27, 2013 at 14:51
  • 1
    $\begingroup$ My impression is that as long as you use a software implementation of a prime curve without point compression, you're probably not violating any patents. (As usual IANAL applies) $\endgroup$
    – CodesInChaos
    Feb 27, 2013 at 15:14

1 Answer 1

Reset to default
9
$\begingroup$

Let me preface this by saying that I am not a lawyer and if you are planning on using ECC in a system you sell, you should hire a lawyer.

There are a number of ECC related patents. However "in all of these cases, it is the implementation technique that is patented, not the prime or representation, and there are alternative, compatible implementation techniques that are not covered by the patents" (src). That said, the patents last 20 years, the implementation techniques that are patented might be freely usable (I say might because I believe there are other legal mechanisms to protect IP) 20 years after the patent was applied for. A very quick survey showed that many of the patents on the Wikipedia page were applied for in the late 80's to late 90's. Thus, by 2020 the currently existing patents should expire.

ECC can presumably be used without infringing on the patents. So, the patents themselves are not necessarily inhibiting widespread use. There are some who would argue that the real reason ECC isn't widely used is due to it's age and the fact that RSA came first. Age lends credibility (the longer it has been around w/o a break the more the community trusts it).

Improve this answer
$\endgroup$
2
  • $\begingroup$ Removed some comments from a previous version of the answer $\endgroup$
    – mikeazo
    Feb 27, 2013 at 15:04
  • 1
    $\begingroup$ I'd like to add that it's probable that RSA is also more used due to it's comparative simplicity. You can do an example encryption with small constants on your graphical calculator. Elliptic curve encryption requires some more serious math. $\endgroup$
    – orlp
    Sep 13, 2013 at 17:38

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.