Windows Azure Web Service already has the next generation of encryption technology

Nothing is more important than using SSL to enhance the security of your site, however, even if encryption is not a new technology, cryptology is still constantly searching for a http://www.aliyun.com/zixun/aggregation/17710.html " > Encryption technology is a safer approach. And our Azure Web Services team has been supporting the latest and most secure cryptographic operations, and today we're going to tell you that we've supported a very good credential for using Elliptic curve cryptography (ECC, elliptic Curve cryptography).

Elliptic curve cryptography, based on the algebraic structure of elliptic curves in finite field (finite field), is not understood? Don't worry, many people don't understand this stuff. To draw the graph of the elliptic curve, is based on y2 = x3 + ax + b This algebraic equation, when you draw the value of X and Y, you will find that it is a symmetric elliptic curve, for example, if you draw the algebraic equation of y2=4x3-4x+4, it will be like the following picture:

In order not to turn this article into an abstruse math class, we simply say that when an algebraic equation has such a complex and symmetrical nature, it can be used to produce a function that effectively generates a public key (the "private key") that is not easily compromised and decrypts it. We first create a private key, select an elliptic curve to generate the corresponding public key, to back from the public key to push the private key (that is, we commonly known as attack, crack) is difficult to name, and the use of today's technology can not be in a reasonable time to crack success, This way, compared to some of the common public key encryption systems that are commonly used today, can increase the difficulty by more than 10 times times (sure you really want to understand why, read this article again), in other words, using the 256-bit elliptic curve encryption method, its security index is equivalent to the use of 2,600-bit RSA encryption, Now the industry is often used in the standard is only 2048-bit RSA encryption method, which is difficult to break the encryption method, so, if the use of the same bit of elliptic curve encryption, to use the current super computer to crack it is impossible.

Having said so much, we just want to let you know that you can now not only buy SSL vouchers that are common on the market, but also buy more secure, ECC-enabled SSL credentials to secure your Web services. ECC vouchers are still a very new technology, the market does not have a lot of business owners have to provide, but if you need, you can now to Symantec or entrust to buy, but I believe very soon many voucher operators will follow up.

Do you know? Azure Web Services has recently been tested with ECC credentials! So you can also install ECC credentials on the Azure Web site service, just like you did in the past, uploading your purchased. PFX voucher file can be immediately operational! Note, however, that not all clients support ECC credentials, but if you are using Windows Vista computers, you can use the browser to browse Web sites that use ECC credentials for SSL encryption without having to go through a special setting.