Re:Show HN: Diffie-Hellman exchange for the layman
by boris1 on Wednesday April 28, 2021 @01:39AM
(#26966013)
Yes, just do not write (mod p), as it can be misleading to the reader. A mathematician doesn't care, but in RFCs they call the (mod p) groups a "prime group" to differentiate it from the Elliptic Curve group. (In fact, I think they call them "prime fields", not merely groups).
I think the keys can be smaller because every random coordinate is a valid value (valid key), but in the case of RSA, valid values are more sparse.
ECDH has smaller keys because the attacks are (until now) weaker and not because you're using an additive cyclic group.