Re: [Cfrg] Call for adoption: draft-hdevalence-cfrg-ristretto-01

On Wed, Sep 18, 2019, at 3:36 PM, Christopher Wood wrote:
> I'm in favor of adoption as well, though am curious to know where folks 
> stand on the issues discussed in [1] and earlier messages. What is the 
> plan for reconciling this with the hash-to-curve draft? Of the three 
> options Filippo outlines in [2], the third seems the most appealing and 
> probably the most workable, though does muddy the "curve" focus of 
> hash-to-curve.

Of course, if we're willing to budge on the API, there's also option #4 wherein FROM_UNIFORM_BYTES is replaced with FROM_BYTES that, internally, invokes hash-to-curve as needed. 

Best,
Chris

> [1] https://mailarchive.ietf.org/arch/msg/cfrg/w91AdGVdLWccafiPub862MObk5c
> [2] https://mailarchive.ietf.org/arch/msg/cfrg/p_r53FtGcaNSB_HwIV0J9FSgYbg
> 
> On Wed, Sep 18, 2019, at 10:38 AM, Richard Barnes wrote:
> > I am not in a position to evaluate the mathematics of this proposal, 
> > but the idea of a curve that files down some of the unnecessary "sharp 
> > edges" of Curve25519 is welcome. 
> >
> > As has been discussed previously on this list, it is helpful in some 
> > contexts to have DH groups in which scalar multiplication commutes with 
> > the private-to-public-key map, since this allows public keys to be 
> > transformed in a way that the corresponding transformations on private 
> > keys are clear. This is the case for the traditional NIST ECDH curves, 
> > but not for Curve25519, due to the "clamping" it requires. If I 
> > understand correctly, Ristretto would have this property, and so would 
> > in some cases effectively be a more useful version of Curve25519.
> > 
> > --RLB
> > 
> > On Wed, Sep 18, 2019 at 12:45 PM Alexey Melnikov 
> > <alexey.melnikov@isode.com> wrote:
> > > Dear CFRG participants,
> > > 
> > >  This email commences a 2-week call for adoption for 
> > >  draft-hdevalence-cfrg-ristretto-01 that will end on October 2nd 2019:
> > > 
> > > https://datatracker.ietf.org/doc/draft-hdevalence-cfrg-ristretto/
> > > 
> > >  Please give your views on whether this document should be adopted as a 
> > >  CFRG draft, and if so, whether you'd be willing to help work on 
> > >  it/review it. Please reply to this email (or in exceptional 
> > >  circumstances you can email CFRG chairs directly at cfrg-chairs@ietf.org).
> > > 
> > >  Thank you,
> > >  Alexey (for the chairs)
> > > 
> > >  _______________________________________________
> > >  Cfrg mailing list
> > > Cfrg@irtf.org
> > > https://www.irtf.org/mailman/listinfo/cfrg
> > _______________________________________________
> > Cfrg mailing list
> > Cfrg@irtf.org
> > https://www.irtf.org/mailman/listinfo/cfrg
> >
> 
> _______________________________________________
> Cfrg mailing list
> Cfrg@irtf.org
> https://www.irtf.org/mailman/listinfo/cfrg
>