Let's assume I need to encrypt data only for one minute, after that time the data is useless. Couldn't I still use ECC2K-130 as it would require 525600 times more PlayStations to crack it in a single minute instead of a year?
!!! NO !!!
Decryption by an unauthorized party could occur within a fraction of a second following the release of the ciphertext.
In ECC encryption (and more generally public-key encryption), the appropriate start time for the attack interval is
- NOT the release of the ciphertext to adversaries
- NOT the encryption time (even if there's a side channel¹)
- is the release of the public key used for encryption to adversaries²
- could be the generation of the public/private key, if there's a side channel¹.
At issue is that attackers can start working long before the encryption occurs or the data to encrypt even exists. They can start as soon as they get the public key (or, in 4, side channel data). That's when time of attack starts ticking. It is reset only by a key change.
In the question, the entity making the encryption uses the public key, thus is not the one who generated the keypair. The question suggests that the time considered is from encryption to when knowing the data becomes dull, which would be 2 in the above.
¹ In side-channel attacks, adversaries get information beyond the ciphertext in often unexpected ways, like timing of encryption, electromagnetic or acoustic emissions, leakage from a CPU process to another.
² In symmetric cryptography, that would be when the first ciphertext is obtained by adversaries.