Efficient Security for Mobile Communication Utilizing Elliptic Curves

In recent years, more and more security-sensitive activities like shopping or banking transactions are carried out over the Internet, an inherently insecure medium. In addition, many of these activities are performed using small, mobile devices, severely limited in terms of available energy, memory, and computational power. This work describes the development of a generic cryptographic library in ANSI C that allows to use the memory saving elliptic curve cryptography (ECC) over arbitrary prime and binary extension fields in the secure sockets layer protocol (SSL) to facilitate encrypted communication over the Internet. In addition, the impact of instruction set extensions on the performance of cryptographic operations is investigated. The developed library needs only five percent of the memory OpenSSL requires, with a comparable performance in prime fields, and a performance gain between factors two and eight when using instruction set extensions over the OpenSSL implementation.