Re: [Cfrg] (on Algebraic Eraser) Re: Meeting notes

[Nico Williams <[e-mail]>]

On Mon, Mar 30, 2015 at 09:23:34AM -0400, Rene Struik wrote:
> From the emails on Algebraic Eraser I have seen on this list, it
> seems clear that most have not given this algorithm any technical
> look. What about actually doing this, instead of having email
> completely tangential email exchanges about a "black box" one did
> not care to open?

To me there's no clear order in which we should tackle the two problems
in AE.  The two issues can be looked at in parallel.

If we can't come up with a satisfactory parameter generation
performance, then perhaps there will be too few acceptable uses of AE
and similar cryptosystems.  If we can, then the same approach will
probably be reusable for other cryptosystems with similar
characteristics (TTP backdoored parameter).  Even if this cryptosystem
should fall, a parameter generation performance suitable for it might
prove useful elsewhere.  This is an interesting problem in its own
right.

Nico
--