Re: [Cfrg] draft-black-rpgecc-00-.txt [was: Consensus and a way forward]

[Alyssa Rowan <[e-mail]>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 27 November 2014 08:14:49 GMT+00:00, Mike Hamburg <[e-mail]> wrote:
>> Why *not* [Curve25519], then?
>Ask anyone who's implemented ECDSA on NIST-P160 :-)

Yes, I think the first question I'd ask anyone who did that would also be: "why?" :)

>Curve25519 has no weak keys because its order is 2^252+O(2^126), i.e. slightly over a power of 2.  Many curve generation procedures specify that the order must be slightly under a power of 2 rather than slightly over, because that also has advantages.

...this curve generation procedure doesn't, so that's a bit of a stretch.

We'll need to weigh advantages (MQV? Not exactly a key-exchange frontrunner anymore... When does the FHMQV patent expire again? I prefer Axolotl's approach) against disadvantages (such as the https://xkcd.com/927/ point, given Curve25519 already achieved pretty wide adoption while we dithered).

It almost matches Curve25519, and the reasoning for it not matching is weak: the value of convergence for consensus and rigidity is far greater than the value of differing for just this reason, in my mind.

It does seem like a sensible way of generating the ultra-strong security curve, certainly, to me. What happens if we constrain 2^x-n to n<32 for efficiency reasons, x=384 and step x upwards until this criteria is met? How similar is that to djb's Curve41417? Is Curve41417 faster than this... I suppose it'd be rpg384r1 curve?

- --
/akr
-----BEGIN PGP SIGNATURE-----
Version: APG v1.1.1
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=T/wx
-----END PGP SIGNATURE-----