A (Relatively Easy To Understand) Primer on Elliptic Curve Cryptography
Oct 24, 2013Nick Sullivan

Summary
This post introduces Elliptic Curve Cryptography (ECC) as a key technology used by Cloudflare for securing HTTPS connections and internal data center communications. It explains ECC as a next-generation public-key cryptography system that offers significantly more security than RSA with smaller key sizes, making it ideal for performance-sensitive applications and devices with limited computational power. The post contrasts ECC with RSA by explaining the underlying mathematical principles and the limitations of RSA's trapdoor function (factoring) in the face of increasing computational resources, positioning ECC as a more sustainable and secure cryptographic foundation.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack