Re: [Cfrg] A draft merging rpgecc and thecurve25519function.

On Thu, Jan 1, 2015 at 6:31 PM, Adam Langley <agl@imperialviolet.org> wrote:
> On Thu, Jan 1, 2015 at 2:00 PM, Adam Langley <agl@imperialviolet.org> wrote:
>> The resulting agglomeration is at
>> https://cdn.rawgit.com/agl/cfrgcurve/master/cfrgcurve.xml (requires
>> XSLT support in the browser)
>
> Tanja points out that that I had 2^255-19 as 3 mod 4. Getting rawgit
> to serve XSLT and sorting out the caching is a real pain, so forget
> that link and use
> https://www.imperialviolet.org/cfrgcurve/cfrgcurve.xml instead. (Still
> uses XSLT support in the browser.)

Is it just me, or is this the draft I uploaded a couple weeks ago,
plus typos, and a section about an algorithm that gets used only to
have its result ignored? Should cat be a coauthor?

This is especially true when discussing the Edwards form at all, given
that we are talking about ECDH with the equivalent Montgomery form. If
we're going to use the NUMS generation algorithm (and we might as
well: it's what we've been doing all along now) over other primes,
then we should discuss the relation between the Edwards form and
Montgomery form, as otherwise the reader has no idea where the magic
numbers are coming from, or even why we are discussing Edwards form,
given that the presented algorithms don't use it.

I can't speak for my coauthors, but the above issues seem surmountable
with a bit of editing, and would give us a document that's easy to
extend when we select the higher strength prime.

Sincerely,
Watson

>
>
> Cheers
>
> AGL
>
> --
> Adam Langley agl@imperialviolet.org https://www.imperialviolet.org
>
> _______________________________________________
> Cfrg mailing list
> Cfrg@irtf.org
> http://www.irtf.org/mailman/listinfo/cfrg

-- 
"Those who would give up Essential Liberty to purchase a little
Temporary Safety deserve neither  Liberty nor Safety."
-- Benjamin Franklin