Re: [Cfrg] Fwd: I-D Action: draft-turner-thecurve25519function-00.txt

[Phillip Hallam-Baker <[e-mail]>]

On Wed, Jul 30, 2014 at 2:05 PM, Randy Bush <[e-mail]> wrote:
> sean, we also need signatures.  would you consider adding ed25519 to
> this draft or doing a parallel draft?

We do need signatures, but do we need curve 25519 signatures?


RSA allows one key to be used for encryption and signature easily. But
that is still terrible security practice.

Looking through the sets of requirements we have, a curve optimized
for encryption may not be best for signatures. And writing up how to
do signatures from a curve is non-trivial (unless its 'do DSA with
this curve')

Given that the EC keys are short, we could have a combined 'encryption
and signature' certificate  but with different curves for each one.