Re: [Cfrg] (on Algebraic Eraser) Re: Meeting notes

[Rene Struik <[e-mail]>]

Hi Nico:

Perhaps. However, please start a new topic thread then. {with hopefully 
carefully contemplated thoughts, rather than twitter-like trigger-happy 
traffic}

Rene

On 3/30/2015 12:49 PM, Nico Williams wrote:
> On Mon, Mar 30, 2015 at 09:23:34AM -0400, Rene Struik wrote:
>>  From the emails on Algebraic Eraser I have seen on this list, it
>> seems clear that most have not given this algorithm any technical
>> look. What about actually doing this, instead of having email
>> completely tangential email exchanges about a "black box" one did
>> not care to open?
> To me there's no clear order in which we should tackle the two problems
> in AE.  The two issues can be looked at in parallel.
>
> If we can't come up with a satisfactory parameter generation
> performance, then perhaps there will be too few acceptable uses of AE
> and similar cryptosystems.  If we can, then the same approach will
> probably be reusable for other cryptosystems with similar
> characteristics (TTP backdoored parameter).  Even if this cryptosystem
> should fall, a parameter generation performance suitable for it might
> prove useful elsewhere.  This is an interesting problem in its own
> right.
>
> Nico


-- 
email: [e-mail] | Skype: rstruik
cell: [phone] | US: [phone]