ECC Certificates. Today.

While widespread use of elliptic curve cryptography (ECC) digital certificates is still on the horizon, Entrust offers a proven method for enjoying many of the benefits of ECC certificates today. Entrust Hybrid SSL Certificates contain ECC keys signed via Entrust's globally trusted RSA 2048-bit root.

What is ECC? In short, ECC is a family of public-key algorithms that can provide shorter key lengths and, depending upon the operating platform and the applications for which they are used, may provide improved performance over systems based on integer factorization and discrete logarithms. ECC certificates are compatible with the full suite of Entrust Authority solutions.

Review the table below to understand the relationship and use of traditional SSL certificates, ECC hybrid SSL certificates and true full-path ECC SSL certificates.

Today
RSA SSL Certificates
Tomorrow
ECC Hybrid SSL Certificates
The Future
ECC SSL Certificates
Trial
ECC Demo Certificates
Let's Talk Buy SSL Certificates Speak with Entrust Get ECC Demo Certificate
Globally
Trusted
Yes Yes Not Yet
(Root is not global yet)
No
Global
Interoperability
Yes Not Yet
(Some older browsers do not support ECC keys)
Not Yet
(Some older browsers do not support ECC keys)
Not Yet
(Some older browsers do not support ECC keys)
Improved
Server-Load
Performance
No Yes
Performance is same or better with ECC-256 keys vs. RSA 2048-bit keys
Yes
Performance is same or better with ECC-256 keys vs. RSA 2048-bit keys
Yes
Performance is same or better with ECC-256 keys vs. RSA 2048-bit keys
Trust
Model
Public
(RSA-2048 Root)
Public
(RSA-2048 Root)
Public
(ECC-256 Root)
Public
(ECC-256 Root)
NIST
Suite B-Compliant
No No Yes Yes
Best-Use
Case
Available Today
Use for most all SSL certificate scenarios
Available Today
Select SSL certificate scenarios where server-load performance is critical, and site visitors and web/app server are known to be compatible with ECC keys
Not Yet Available
Best-use case will eventually be SSL certificate scenarios requiring NIST Suite B compliance, or improved performance
Available Today
For testing of ECC certificate — SSL and S/MIME — compatibility only
Trust
Infrastructure