Compared to RSA, which of the following is true of Elliptic Curve Cryptography (ECC)?

A.
It has been mathematically proved to be more secure.

B.
It has been mathematically proved to be less secure.

C.
It is believed to require longer key for equivalent security.

D.
It is believed to require shorter keys for equivalent security.

Explanation:
Elliptic curves are rich mathematical structures that have shown usefulness in many different types of
applications. An elliptic curve cryptosystem (ECC) provides much of the same functionality RSA provides:
digital signatures, secure key distribution, and encryption. One differing factor is ECC’s efficiency. ECC is more
efficient than RSA and any other asymmetric algorithm.
Some devices have limited processing capacity, storage, power supply, and bandwidth, such as wireless
devices and cellular telephones. With these types of devices, efficiency of resource use is very important. ECC
provides encryption functionality, requiring a smaller percentage of the resources compared to RSA and other
algorithms, so it is used in these types of devices.
In most cases, the longer the key, the more protection that is provided, but ECC can provide the same level of
protection with a key size that is shorter than what RSA requires. Because longer keys require more resources
to perform mathematical tasks, the smaller keys used in ECC require fewer resources of the device.
Incorrect Answers:
A: ECC is not more secure than RSA; it just requires a shorter key length to provide equivalent security.
B: ECC is not less secure than RSA; it just requires a shorter key length to provide equivalent security.
C: ECC requires a shorter key length to provide equivalent security.

Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, 2013, pp. 818-819