Cryptographic algorithms are weakening day by day and there is a need to transition to new algorithms. RSA algorithm is used for signature creation in the current structure. The RSA algorithm was one of the first public key cryptography algorithms developed by Ron Rivest, Adi Shamir and Leonard Adleman in 1977. Although the RSA algorithm is still secure, the use of elliptic curves in cryptography is increasing and the elliptic curves play an important role in many public key cryptosystems.

Elliptic Curve Cryptography (ECC) was first proposed by Neal Koblitz and Victor Miller in 1985. While the reliability of the RSA algorithm is based on the difficulty of solving the factorization problem, the reliability of the ECC algorithm is based on the difficulty of solving the discrete logarithm problem. Elliptic curve encryption can provide security equivalent to the security provided by classical encryption algorithms with much shorter keys. It can also encrypt faster than RSA algorithm for the same key size. The elliptic curve encryption with a small key size means less processing costs and less memory consumption. With these features, ECC is the candidate to replace the RSA algorithm.

In order for the Elliptic Curve Signature Algorithm (ECDSA) to be used without any problems, hardware, software and libraries that create and validate electronic signatures must be compatible with this algorithm. In this context, a cryptographic suite was created to test the interoperability of the verification mechanisms of e-signature applications with different signature and hash algorithms.

The following table provides the names and properties of the signature files created within the cryptographic suite:

Cryptographic suite packages for selected signature types are given in the table below.

While there is no cryptographic restriction on the selection of the hash algorithm according to the key size in the RSA algorithm, a hash algorithm suitable for the key length should be used in order for the signatures created using the Elliptic Curve key to be considered cryptographically secure. Accordingly, signature creation applications should consider the key and hash algorithm combinations given in the table below. In addition, e-signature applications should determine the key of the signer certificate and should not leave the choice of signature algorithm for Elliptic Curve keys to user preference.