In a move designed to improve security on its cloud computing service, Microsoft has announced that the Azure Web Sites platform as a service will now support Elliptic Curve Cryptography (ECC). “Elliptic curve cryptography is an encryption technology based on the algebraic structure of elliptic curves over finite fields,” blogged Erez Benari, an Azure Web Sites program manager. “The symmetry and computational complexity in this sort of function allows us to efficiently create a public and private key set that are much harder to break.”
He noted, “Compared to the classic private/public key generation, this is harder by a factor of 10, approximately.”
To use the new ECC support, developers will need to purchase an ECC certificate from a vendor like Symantec or Entrust.