Re: [Cfrg] Elliptic Curves - poll on specific curve around 256bit work factor (ends on February 23rd)

[Alyssa Rowan <[e-mail]>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

> [TA] Have you considered doing a poll of what specific curves
> people actually want to use?

> [PHB] […] your poll […] rather undercuts the whole process.

Strongly agreed.

> [KP] Yes, we considered a number of different ways of narrowing
> down our choices. However, we settled on doing it this way. Please
> stick with us.

With the greatest respect, if upstream and external parties were
willing to tolerate undocumented decisions by editor/chair fiat,
they'd stick with the NIST curves, wouldn't they?

We were asked because publicly-documented technical consensus, not
guided by any one party, is very highly desirable.

We need that if our efforts are to be meaningful.

> [PHB] The way I would do this is as a Quaker poll asking people
> what their preferred outcome is and what they can live with on 448,
> 480, 512 and 521.

I agree - that process will probably work much better than these
forced-choice yes/no polls!

So: my preference votes on prime consensus for the record:

Just 2^255-19: Acceptable [no concerns; but CAs want extra-strength]
     2^379-19: No         [one 1 mod 4 is probably enough]
    2^384-317: No         [slow and awkward]
     2^389-21: Acceptable [seems fast, but not very well-explored]
     2^414-17: Acceptable [fast, but a slightly awkward size]
2^448-2^224-1: Preferred  [fast, strong, good size, plenty of margin]
2^480-2^240-1: Acceptable [fast, but only with 64-bit]
    2^512-569: No         [way too slow; awkward; would not implement]
      2^521-1: Acceptable [could live with it; slower than I'd like]

- -- 
/akr
-----BEGIN PGP SIGNATURE-----
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=FXwL
-----END PGP SIGNATURE-----