Matt, a security analyst, needs to select an asymmetric encryption method that allows for the same level of encryption strength with a lower key length than is
typically necessary. Which of the following encryption methods offers this capability?

A.
Twofish

B.
Diffie-Hellman

C.
ECC

D.
RSA

Explanation:
Elliptic curve cryptography (ECC) is an approach to public-key cryptography based on the algebraic structure of elliptic curves over finite fields. One of the main
benefits in comparison with non-ECC cryptography (with plain Galois fields as a basis) is the same level of security provided by keys of smaller size.
Incorrect Answers:
A: Blowfish is an encryption system that performs a 64-bit block cipher at very fast speeds. It is a symmetric block cipher that can use variable-length keys (from 32
bits to 448 bits). Twofish is quite similar and works on 128-bit blocks.
B: Diffie-Hellman would require longer keys.
D: Elliptic Curve Cryptography (ECC) provides similar functionality to RSA but uses smaller key sizes to obtain the same level of security.

Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, pp 251, 252, 253, 254
http://www.studymode.com/essays/Elliptic-Curve-Cryptography-And-Its-Applications- 1560318.html
http://en.wikipedia.org/wiki/Elliptic_curve_cryptography