[Cfrg] draft-ladd-safecurves-02 and draft-josefsson-tls-curve25519-03

[Simon Josefsson <[e-mail]>]

Dear WG,

The TLS document draft-josefsson-tls-curve25519 has been updated in -03
to refer to the document draft-ladd-safecurves-02 that has been
discussed here.  My thinking is that the list of curves that
draft-ladd-safecurves recommends, and potentially/eventually the CFRG
can recommend, is a good list of curves for the TLS WG to consider.
Feedback from this group whether that thinking a good idea or not is
appreciated.

Another aspect came up when doing this.  Our draft includes details on
public/private key representation, shared secret computation, and test
vectors.  Would it make sense to move this to draft-ladd-safecurves
instead?  It seems any IETF protocol would have similar requirements.  I
cannot tell if there are per-protocol specific considerations that may
influence this, making a generic specification difficult.  Thoughts on
this is also appreciated.

Thanks,
/Simon