Re: [Cfrg] Using draft-irtf-cfrg-spake2-00 in Kerberos Preauth

[Nathaniel McCallum <[e-mail]>]

On Wed, 2015-01-28 at 11:23 -0800, Dan Harkins wrote:
> 
> On Wed, January 28, 2015 7:53 am, Nathaniel McCallum wrote:
> [snip]
> > This methodology differs from the Chromium methodology in three ways:
> > 1. The hash function is variable.
> > 2. OIDs are used instead of a friendly name (like P256).
> > 3. We generate M/N for all curves supported by OpenSSL at build time.
> >
> > In short, this is just a poorly devised method for hashing a constant
> > string onto the curve. I am definitely open to alternatives.
> 
>   Have you considered the technique from "An Indifferentiable Hash
> Function into Elliptic Curves" by Coron and Icart?

I have a copy of the paper and have glanced at it briefly. I have not
had time to implement it. Nor am I sure how difficult this would be to
do with OpenSSL.

Nathaniel