Bitcoin Forum

Other => Beginners & Help => Topic started by: ffunenga on October 02, 2012, 05:26:15 AM



Title: Elliptic Curve algorithm equivalent to RSA's asymmetric encryption?
Post by: ffunenga on October 02, 2012, 05:26:15 AM
I've been searching but I cant find anything about this... only EC Diffie-Hellman [1] with symmetric cryptography, which is exactly what I do not want :(

Imagine this:
  • generate a random private key, k
  • then calculate a "public key" with ECC, d=kG
The algorithm I'm looking for is this: any message cyphered with the public key will "only" be decyphered by the owner of the private key.

Does this exists? Has anything like this been developed yet?

[1] http://en.wikipedia.org/wiki/Elliptic_curve_Diffie%E2%80%93Hellman


Title: Re: Elliptic Curve algorithm equivalent to RSA's asymmetric encryption?
Post by: CIYAM on October 02, 2012, 06:03:30 AM
Did you look at this link?

http://en.wikipedia.org/wiki/Elliptic_Curve_DSA


Title: Re: Elliptic Curve algorithm equivalent to RSA's asymmetric encryption?
Post by: ffunenga on October 02, 2012, 06:39:49 AM
yes i have :(
In section "Key and signature size comparison to DSA" its written: "Suppose Alice wants to send a signed message to Bob."
In "Signature verification algorithm" step 2 has: "e=HASH(m)" That m is the plain text message.

This means that ECDSA is only used to check the message integrity. As far as the algorithm is concerned, the trasnmission can be: "plain_text_message+signature"

What I want is a way to cypher a message in a asymmetric fashion, just like RSA.


Title: Re: Elliptic Curve algorithm equivalent to RSA's asymmetric encryption?
Post by: CIYAM on October 02, 2012, 07:22:49 AM
This means that ECDSA is only used to check the message integrity. As far as the algorithm is concerned, the trasnmission can be: "plain_text_message+signature"

Interesting - I must admit I have never properly looked into the details of ECDSA before (and although my logic is good my other math is rather average).

As the Bitcoin ledger is public it of course makes sense that nothing is encrypted but instead just correctly signed.