Questions tagged [ecies]

ECIES is Elliptic Curve Integrated Encryption Scheme. It a hybrid encryption scheme proposed by Victor Shoup.

ECIES is Elliptic Curve Integrated Encryption Scheme. It a hybrid encryption scheme that operates over elliptic curve fields proposed by Victor Shoup.

Integrated Encryption Schemes combine public/private key cryptography with symmetric encryption and MACs to produce an output tuple {R,C,T}, where R is a random value encrypted under the public key, C is the cipher text, and T is an authentication tag. R is further derived into independent keys to key the symmetric cipher and the MAC function.

A similar scheme is Abdalla, Bellare and Rogaway's Diffie-Hellman Integrated Encryption Scheme (DHIES), which operates over the field of integers.

4 questions
3
votes
1 answer

Which KDF should be used for ECIES?

According to Wikipedia, ECIES requires a key derivation function. I already have an implementation of PBKDF2-HMAC-SHA256 in my library, so I could use this. Is PBKDF2-HMAC-SHA256 (salted of course) sufficient as KDF? Or should I use another KDF?
K. Biermann
  • 364
  • 2
  • 11
2
votes
1 answer

How is ECIES available in FIPS Validated libraries?

ECIES is Elliptic Curve Integrated Encryption Scheme. Both Certicom's SecurityBuilder and RSA Data Security BSAFE provide ECIES. Both are FIPS 140 validated, and both clearly list ECIES in their data sheets. ECIES effectively creates a stream cipher…
user29925
2
votes
1 answer

Reason to generate encryption keypair server side rather than on device?

I want my native applications (android/ios) to have a keypair (RSA or ECIES) so that certain data on requests to my API can be encrypted. I want each client to have a unique keypair. The device will register that keypair with my API and it will be…
Tom L.
  • 21
  • 1
0
votes
0 answers

ECIES-like scheme using PBKF2?

I would like to marry ECIES to a scheme based on PBKFD2. Effectively, I want the Key Encapsulation Mechanism to use Diffie-Hellman, but rather than encrypting the seed material with the recipient's public key, I want to use a KDF to mask what…
user29925