Re: [Cfrg] Call for adoption: draft-hdevalence-cfrg-ristretto-01

I am not in a position to evaluate the mathematics of this proposal, but
the idea of a curve that files down some of the unnecessary "sharp edges"
of Curve25519 is welcome.

As has been discussed previously on this list, it is helpful in some
contexts to have DH groups in which scalar multiplication commutes with the
private-to-public-key map, since this allows public keys to be transformed
in a way that the corresponding transformations on private keys are clear.
This is the case for the traditional NIST ECDH curves, but not for
Curve25519, due to the "clamping" it requires.  If I understand correctly,
Ristretto would have this property, and so would in some cases effectively
be a more useful version of Curve25519.

--RLB

On Wed, Sep 18, 2019 at 12:45 PM Alexey Melnikov <alexey.melnikov@isode.com>
wrote:

> Dear CFRG participants,
>
> This email commences a 2-week call for adoption for
> draft-hdevalence-cfrg-ristretto-01 that will end on October 2nd 2019:
>
>   https://datatracker.ietf.org/doc/draft-hdevalence-cfrg-ristretto/
>
> Please give your views on whether this document should be adopted as a
> CFRG draft, and if so, whether you'd be willing to help work on
> it/review it. Please reply to this email (or in exceptional
> circumstances you can email CFRG chairs directly at cfrg-chairs@ietf.org).
>
> Thank you,
> Alexey (for the chairs)
>
> _______________________________________________
> Cfrg mailing list
> Cfrg@irtf.org
> https://www.irtf.org/mailman/listinfo/cfrg
>