SSL CertificatesTrust solutions
AnimatedSite Seal Logo GoGetSSL Site Seal
Better Rankingin Google Search Google Security
Domain SSLBy GoGetSSL from $39.00 /yr
AnimatedSite Seal Logo GoGetSSL Site Seal
Better Rankingin Google Search Google Security
Domain SSLBy GoGetSSL from $39.00 /yr
Get your business identified and transparent globally
Minimize financial vulnerabilities
Boost OV/EV SSL validation process
$59.00 per year Get LEI Code
Home Wiki SSL Basics / FAQ ECC and SHA

ECC and SHA algroithms

  • SSL certificates most often use RSA keys, and the recommended size of these keys is constantly increasing (for example, from 1024 bits to 2048 bits over the past few years), which is associated with maintaining sufficient cryptographic strength. Both types of keys are based on the use of asymmetric algorithms (one key for encoding and one key for decoding). However, ECC carries the same level of cryptographic strength, while having much smaller keys, which allows for increased security along with reduced computing requirements. Let's look at what ECC is and why you should consider using it.

    • 1

      What is an ECC?

      ECC (Elliptic Curve Cryptography) is a public-key cryptography method based on the use of elliptic curves over finite fields. The most important difference between ECC and RSA is the key size compared to cryptographic strength. ECC is able to provide the same cryptographic strength as the RSA system, but with much smaller keys. For example, a 256-bit ECC key is equivalent to 3072-bit RSA keys (which are 50% longer than the 2048-bit keys used today). Finally, the most secure symmetric algorithms used in TLS (for example, AES) use at least 128-bit keys, as a result of which the transition to asymmetric keys seems to be the most rational step.

    • 2

      Why to use ECC?

      The small key size makes ECC the ideal choice for devices with limited storage or processing resources that are increasingly found in the IoT field. Speaking in the context of server-side uses, the small size of the keys allows you to speed up SSL handshakes (handshake), which translates into the fastest page loading and higher security.

      Which certs supports ECC?

      • All Sectigo SSL certificates;
      • All GoGetSSL certificates;
      • DigiCert PRO products.
    • 3

      How to generate ECC key?

      We have published a details manual of the generation process for ECC Private Key and CSR code. Please follow Wiki guide.

    • Conclusion

      We are using ECC Certificates to protect our own services and highly suggest doing the same for all webmasters.

Fast Issuance within 3-5 minutes

Get a Domain Validation SSL certificate within just 5 minutes using our friendly and automated system. No paperwork, callback or company required.

Price Match 100% Guarantee

Found a better price? We will match it - guaranteed. Get the best possible price in the World with us. The correct place to save your money.

Free SSL 90-day for free

Try 90-day Trial SSL Certificate before the real purchase to test cert's functionality. 99.9% browser and mobile support. Unlimited prolongation.

Money Back 30-day guarantee

Customer satisfaction is our major concern. Get a full refund within 30 days for any purchase of SSL certificates with 100% guarantee.

Speed up SSL issuance with LEI

GoGetSSL™ now offering fastest issuance of SSL on planet due to use of LEI code and API automation. Legal Entity Identifier (or LEI) is a global identity code, just like DUNS. Learn now how LEI may help you.

LEI codes starting at
Check LEI offer
1,366,468+Total LEIs issued
224+Jurisdictions supported