Elliptic Curve Digital Signature Algorithm (ECDSA) 3K Certificate and Keys Support

The ECDSA is a digital signature algorithm which uses keys derived from elliptic curve cryptography.

The SmartZone provides an option to disable/enable the ECDSA certification on a per-zone basis. The APs in the zone with ECDSA certificate enabled receives an additional controller-signed certificate from the SmartZone. This is called the 3K certificate. The 2K MIC (Manufacturer Installed Certificates) on the APs is still used as the trust anchor for the SmartZone. The 2K MIC and corresponding key (2k length) remains untouched, backward compatibility of the zone only allows 2K certificate/key.

The SmartZone managed APs issue ECDSA signed certificates which are valid only among the same SmartZone cluster nodes.

The ECDSA is faster than RSA in key generation and signing operations. Signature algorithms are used in TLS handshake and SSH authentication.

Parent topic: ECDSA 3K