[Cfrg] Ed25519 to be approved for FIPS use?

Tony Arcieri <bascule@gmail.com> Wed, 09 August 2017 03:52 UTC

MIME-Version: 1.0
From: Tony Arcieri <bascule@gmail.com>
Date: Tue, 08 Aug 2017 20:52:25 -0700
Message-ID: <CAHOTMVJ8U5=qzbOz9kUnCZBmJp57XDE0+UWvTsxhH5j_BxZn-A@mail.gmail.com>
To: "cfrg@irtf.org" <cfrg@irtf.org>
Content-Type: multipart/alternative; boundary="94eb2c1a4f383f1d6b05564a037a"
Archived-At: <https://mailarchive.ietf.org/arch/msg/cfrg/Fn8nyD8DWhBDfpCDbc0euRj33Ag>
Subject: [Cfrg] Ed25519 to be approved for FIPS use?
Precedence: list

I saw this message from Phillip Hallam-Baker on CA/Browser forum and
thought it might be of interest to people here too:

https://cabforum.org/pipermail/public/2017-July/011663.html

---------- Forwarded message ----------
From: Phillip Hallam-Baker via Public <public@cabforum.org>
Date: Thu, Jul 20, 2017 at 2:56 AM
Subject: [cabfpub] Curves Ed25519 may appear as NIST recommendations
To: CA/Browser Forum Public Discussion List <public@cabforum.org>

FYI: From the IETF meeting

In DCRUP today a NIST employee withdrew a proposal to add the P256 curve to
DKIM on the grounds that it is ‘likely’ that the Ed25519 (and possibly
Ed448) signatures will be approved for at least some purposes in a FIPS.

There are many ways that this could not happen. Not least the lack of a
director of NIST. But if it does, it would be a positive outcome. I really
don’t much care which ECC curves we use so long as we all decide to use the
same curves everywhere.

[Cfrg] Ed25519 to be approved for FIPS use? Tony Arcieri