Re: [Cfrg] Adoption request: draft-hdevalence-cfrg-ristretto

Jeff Burdges <jeff@web3.foundation> Sun, 23 June 2019 19:42 UTC

Return-Path: <jeff@web3.foundation>
X-Original-To: cfrg@ietfa.amsl.com
Delivered-To: cfrg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A368D12023B for <cfrg@ietfa.amsl.com>; Sun, 23 Jun 2019 12:42:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Level:
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=web3-foundation.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZekiNY1OtGBV for <cfrg@ietfa.amsl.com>; Sun, 23 Jun 2019 12:42:32 -0700 (PDT)
Received: from mail-ed1-x52a.google.com (mail-ed1-x52a.google.com [IPv6:2a00:1450:4864:20::52a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9682B12004D for <cfrg@irtf.org>; Sun, 23 Jun 2019 12:42:31 -0700 (PDT)
Received: by mail-ed1-x52a.google.com with SMTP id d4so18214704edr.13 for <cfrg@irtf.org>; Sun, 23 Jun 2019 12:42:31 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=web3-foundation.20150623.gappssmtp.com; s=20150623; h=to:from:subject:openpgp:autocrypt:message-id:date:user-agent :mime-version:content-language:content-transfer-encoding; bh=PeHMPLoWUoGqq1huCt0sDVEYDl75XeFAO1Xb4aFFygM=; b=EkAR6UHNoMEDn1l9ZXQJO9W4JGCJk90XyHLg1VG/0JRhQH8Ob5GWgQadDSj0aOL/+Z gh1qSPyOui05Mr54hsTm4YCPDv4ckYPJmzfS8SM4kMLT3Wr76hRH9UJX6O4n0sJ+zD7N I4feXlt0XxryOA0FR5IDO8n5JlWcRe/ZLnawYy4Qz/6N0zOBQiQeWTvwbDEga6yrtfmo zpZT102Y4MENOIrloQu0iP9UarTLawSzgVXwkT3jJRU2VPwMBUPM6l1KyoX8GtZDx1xN s6kHjSUA2FiFmHU9IQgfAtyZrjT12NIUdT+keRD+3WCD+f2OliQbcGimzJwgRL8X+2WE itfg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:to:from:subject:openpgp:autocrypt:message-id :date:user-agent:mime-version:content-language :content-transfer-encoding; bh=PeHMPLoWUoGqq1huCt0sDVEYDl75XeFAO1Xb4aFFygM=; b=e9ZagkMZ0mYGDT8TIOf19hwdVwjFTAzCv5Kh8pLnJuRwgUy249x95b3GwSHsplvftP MJa8xw92kpLfIGWsII/iQJJD8yB2EdoWtFf5z2qBHJsMIY3TfpNDLPd+iSo7/pgZwZqF WBHsc9OasFtnKaVNL9BG+5Jqi2AA8T9GhHzJ1ocAc+lyS/GyEyr9n9Cako28JRgUpx7x G6fwZxBqEF0ZiuDF4BMyG0V26angbAPF+UdHPDaMl8C7PU/ox7NTtoODZfA6dV30Okf6 7kp3VPcyg+enFUGtwPZibvieJg31hFkrzMqgdoNHsJ6nPIMegK676pORQ8RphIdVcVZS lV5A==
X-Gm-Message-State: APjAAAVC6jwDmgo9n9CyDXpD34P/jN19NGAVOqM68Igp2bCd65bbM2Il /sIQR7i94z90srzex+FQIIZOdmPxtd2hpMLZh/fA5SDhFbMfHYGRJvB10w+80PThycZYJff4Bqt IdiYXkaTPz6JDnxpFC9nM2xsytml6bkGjuwDw+ze9vCGeyZSGBVfsW8sQO0g=
X-Google-Smtp-Source: APXvYqwOHlp8iT0QAJO+yAHpf/YT0baibjf7rXQiSq8V7L89xvJzz4UWG5FRCDC0FLqtzz4Kn2MIkQ==
X-Received: by 2002:a50:95b0:: with SMTP id w45mr38712653eda.12.1561318949971; Sun, 23 Jun 2019 12:42:29 -0700 (PDT)
Received: from desktop-ld6e9v9.home (sam.net.in.tum.de. [2001:4ca0:2001:42:225:90ff:fe6b:d60]) by smtp.gmail.com with ESMTPSA id d12sm3041928edp.16.2019.06.23.12.42.28 for <cfrg@irtf.org> (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 23 Jun 2019 12:42:29 -0700 (PDT)
To: cfrg@irtf.org
From: Jeff Burdges <jeff@web3.foundation>
Openpgp: preference=signencrypt
Autocrypt: addr=jeff@web3.foundation; keydata= mQINBFVtaNcBEADGvG/feYrSCKlkW2xAD901hAEKgebimSIMsE6AYq9CqOT+cFtKb0JvrkUX FDQzwt5jObmhoLkIzHvZKEnasjNuKMWIKhr8nOXfcz2MiNJhJZJ4qNCYlwAFG+CMlveEPemy z/z/hwntvHSiijImAzOnTdX8Cf5MycDrnrEIJRsMJwvHM6RgS6ra1lO1sZwLrqpUk8MVn89R T5XLACutFglUGXzYS75L2pJ9nrISY3j8ZU88We3aQahuXXNoLdr3ZG1kvumWspWXKE9+lcQn 2rDR4ePvwlzan5xDLRgrn1QJZmJu8seaBFuy/SEbrQ2pQi43SWeoNxI0pc5B5xnmxzeIt3AG 8F6yVrMl7rBzyia+vYDu9DWSNZKo4iUTlqfNH/E2EkwyH1hCYXb6Vw8FKXqkkD4mQbrLkqEp GTTsoABm5Rt+xTKEqhc0PymQAqPeHK1kRtyv1gP9STZmnCW20F5iewW/gG4fJLryVwypAcBX M59VB+xS5mvZCTBvji2oOojTzlKrr8Iv1OZD6dcHLANIwc5VSYYMODptSeREubDLr89XAkqT fn3WxHp+Iag2Ht/DKPPg2nFq78J9M861b7ulyKMJMdrczM37tb1wQujrYCbcCIGsgD0VEO2q ZUeVlgoqpcD35LZotYH/freimthotrm1qrpUff/5vPVTZPjnRQARAQABtCZKZWZmcmV5IEJ1 cmRnZXMgPGplZmZAd2ViMy5mb3VuZGF0aW9uPokCTQQTAQoANwIbAwQLCQgHBRUKCQgLBRYC AwEAAh4BAheAFiEEau8RygnegG5p03CXB9MQLvGhua0FAlrnhdUACgkQB9MQLvGhua0NdRAA wUuxwEVdWpNxEwFJMdEE+saDbf43W3l98Gos4SYM8TkrYVPaVUpWDT9XJxD0BwQUfW64b8DB NKVB2LX1XdpDPYbRwDDN+WaBt1hP8wFEBIEJgIqGdA52AZzZlV2WsPFYdfGk5kbeHkghNYP3 2ibqvKXmCJFo4XUvOu78gZw5MUBzOulNRwnp+TSnZcxwUePYd388lfwx5mIM/0dviGHks7lO KHfGR31XpXM5X3TssmDof+owzC9+4zqwBOD1CjTWC91s73kxTAbqWJfy29Vb3jF97/APqmU0 LWNJcbNn+UUVrY0S84TNIMAfrXHhs4ltEYzlYY+vwxAbkkVAw/LDGMdFpDV6OWKXcLTlBT57 jreVVUvN9pMFMrtFcL6zmr9q00gwhwShAGZmyn0HBDGDKgRX+Q8QjFzqZaC4a/ZSTGSCAgh3 izlCweFQgx+UabXAqa0JJkmPz7MJr3/letX3+xhjuclq8LTUhglWSZqVdsUxzjdjXxacU4Zy QuqkfguWfeOTPTyLhfh2qutpPx+7UQhTOz/kN5wA7MdQN4QqRqicd5kPFwXsk6EQsWvhxuwf VKotImh2gBkBH9VVwWJqQ69opO2Q1k5GeK5Pk7BJFiHu0C082tdi9PGfS/BMHNVXOLIoWXB0 KnKCy8Xr1HW7RJMp1tjI95GlpqX++ICs7nu5Ag0EVW1uIgEQAOPhkanmK3G9zj/OqCB6u449 U7kciJc5fUVKEERH6GQ0cS3tV/Du8FfjIss3XmUN3evXjlMUAaGgnpe9YU/FsyAWO5/D1nWQ b2u6iQ8CqfCW6AFYdpSYkmJquh0RFrSt+2UBOh7/v5aOEURwn/8Y6xhNcloxDdJGc9Tcvf0r MWaxF1EHGqxfxWj+fUGw2s1m+BHlvGvqXbc1yNIXrBOSyFq+AUgYOS2wh6GnqVKLu12CVMgH S7P/UAggBIMF0cGNcDgpEsNQbzS9ldJhcD0OCtz/VJvnlrVQMtI6YII68XDpX7dTet9iC3tH anHIu9Jfx8CrdPOh6g52X1XaKK9DdVVUF5202dSefbYCOPWEqxEDfmvBxpHwuruSOVbwbn5q XRb+n5IuHkdRQ3aXDQbDYObQnscM3QAVeVLxb6z17Ot+njPSPpdEKPHbQg3mjDFXTNaMWGCi 1l5NXKhGWx+37S+QZymHYJmaExA0kX3ltx0HwLvrZQ4ZrQeMVTstYC/sKjr92R/I7iL/snCH J7CZVfDF9yG/hEWAMT+5ovcjN1l9COJ5psLh52gNmzhrKB5tn3E8m/l5OCUOgREWAa8gp3L8 YjjBEG1b/l/5GJB3F8xMhPH5EcjxqX+mr3Ffw1ZrnvydgsXrFzy3OxaRxxtoqPQWX8B/zcXp 300PiBS0tTcTABEBAAGJBFsEGAEKACYCGwIWIQRq7xHKCd6AbmnTcJcH0xAu8aG5rQUCWtT+ TQUJCSn3KwIpwV0gBBkBAgAGBQJVbW4iAAoJEKusf9HMEAp0ZwYP/jESlL+P7vAJ/ykLpp10 u3Va794SAfCEemys069vUxty+OzC04BVdB8X0AGqQGt8NooKtd5zoGrGL409N8sSGl7VXyam uaCoRhkE6eR4aO5ugbHvM9ka9aGmK8tdUwqzgRg8qLhsbTvPPplBwSHNl66cvEqh1xwkdZ0Y qZDLz1IUKn6ACsDiJNfrax406e4t5OeoAjtdNoN4T05coMRxTvspBRMewGmyn5sJUGkydWlG qgyd6rmSW+kypdgV1tczW+7hgHkHVEPzUsKksKEmRlK0BADVQtgs12DGk1ftWTQ35WEWlXBp gxaJm2Y6+fzOzDxbJIDAwSaQQFnzchFTv+qHdmM3zK8PolBdvVBiju8IaazZtOo3oEki9r5J P43nabGqmQEOJMyCcKhKjj7bWSk7mcx+NKWTwRf1wqnv0Qe/xkmFfnK7bFbfoo1/8wP/p+9b hsAWcbWG3PtIxS4binc17+09ZZj68MiOOTRvIhlxdVoA9IbFSQhYrTspZGzCka5kbHPzVdw4 LedkHxVSNctSMds0JqIoewei2Kl35aCKvXLs6Dk6ACqX/eYL8wbKZu3AQ9W+48sEc/OZNYsI wTjlaWuqs/ULscToXIu5FnI32g/U5yDuKIYLjVUXekCMn5LHAzLf4Ub1kKxhqp0p/mvyDg9C DFv2oosaeSGBSayDCRAH0xAu8aG5rR4wD/9ayKZmVbpdoy4A92L+rED3iIXveLpvwmTDMX/X nIXg3agMq+CgRud0R3z+Dz3xQwqLG46lIdlsBVcI/hMzg2zP+zRhI2agNFpSPCrT3x/COvOm uhxbJ+xjJKoG1G6o73ieusD2+w1bFmRf3yZ0LSB2fmfyPZPtyW1tpAku21puDNn+nPbTqt9I PzFrRP2NMoKVWsPjXt4G0w46zBacto1tqzglNAPnYLAHtcdMLrWbBNouXS+3m+8tmX5NCvdB NOBLRmkKftz16JYMdemJSTs4krCWUJDTOT+QH0JVe11ARDNsMuts1IIolycQG3fDfKgljQma 6xMrYcYIzrsBJOJaRyfi0MefiX3GFsar+Sx3lgBK1422aLxkPyRS16FX3OnQcKxt34XoY8ll Q6sk8Swjq9FqX6ryXrY34oGJM0RJ865RkGSXc2+k/8jRpg9mSPGpaqO9j66fx5kvSi8jZvye fZSCIwGwML+okz5oi0xdpCledCK+Pd3PAC9NlDHOvGg/B3IhbWy7zQEJKwLcKzmw+dWlaJwC SaLUOYB9owCF7IbrROUkYx+HWfpYq1WvOvMlS9bAPHj0pKxMpyIU9jUpJdNQuv53Lwmj+eOR BN4sfpzT0LzinS0ukiEudW4tTOi2TiF4i8w0o6uzCm0W0auHESD4M1/tg/uiRHDxtDvCDrkC DQRVbXZjARAA7NyIV0fM659C0CAxr1JMvi96C/0mRmAc17VC3uSFdUwTHQQcRCc3Bg7n52oM SATph1llcSl6U1T70rMeEUCL5wDMGBS6fuug+g8k4swWxRYDb6H7IebBjXymVHvguukyfchu j7K5gyhgzrOMjQJvZbfoWV5bt4cs1b84He9DZjfvpaTquLSUwAaFEh8KgXp9B+enPGkZSHLD nQKaiSbJ42CYaLKhUf5yu8xJNEb/vvohKCK7KfT+vY5wPIhxSDWMXV6aHelRclr7uXdEZZRO GIQIOAHBlmmZ4YS9Jraj6Z7SCwlOSOd4OKg12i+buSplsLR8NtHXkXjwreoseTuEqlhUiUdT nga8f0Rx3fPlwQVWNNyPE4Xcxtj5rX/476mAHCNPdSmYiIYHN3MtSbgcu6tC7DkVpV1D6DHF rp7pMPY4rlbYmpBPziBdztAxaqcaY4qLTk8FQgKMNAtly3xHa4X7x/a8dtuujhMZfU77eH5C MGUed+Xx/+6aeZu+HIqELYdMV9osYKlLFKUfXQQDhnvwI1BZqlv8iz+TR4O3evQqTJHh2MPZ 0JS6/tx6Zyz2iD+/N9hMI3kAp2GrCais30kXAs1peGvoMKDLUR4GhAhRvYKtl49sD54eGwy5 pniDP3zA+BfDSu4RoRCZdDgI2shgKEJ+CU3ZeK4sjR16jvEAEQEAAYkCPAQYAQoAJgIbDBYh BGrvEcoJ3oBuadNwlwfTEC7xobmtBQJa1P5NBQkJKe7qAAoJEAfTEC7xobmtPZgQAMHEg/v5 XJZGsjSGdCvpN2E6OGZKFbWDZN9wpwIAN46Rqd4B/NK9tSTIJplTZYvZOpQvrmeFWWB73ZAs fS8lIDG8vsfX7MSQDw42WFGEqUCLVsspwwwvM7RrEwb9hB7VxNDYsJQKcbSMcHzy00dC7gbp 0ZgLKT3TbhAzMK5ZgK0ovZirER6yY0avUwWvjtlMl+091DrzB2a5DvU4hWX1HnsVdlzrDes6 OcGIGvjniYrDNZcwO87Ds/fFymBLJLCeHDc2RNv7XFuMR1jW0kjInsaMITeHQ+3SzxGUEzh0 kw0uxRZzdZKE89byKmAoRDoLZtghjrYQCpbSjvu4odubMesdYA1Lyasequf9sWyRKJiln4mC glL3ptko9o6ebnFMeFdI1tWllYkYu+NOK0rhxs/dtJOOYT2ZDmmv1EUFbnoyugZNuOVzw0IZ EbuR+zc6KfPxHAN60V1oR4TaUVxveRZylu5hg9bFU6gOY1HBB200TI82Dll9Y5kCALfnTeca ubC9qJEeFgIhxJDST+xg1WLxLHd8M0pkLgwUs7hElYnU6KPtAV1lFRM3wIGPiJdATnxoq5Es JQkyFRJHTTwM13/LreYzOefvZ761GRmzslk0vNvEzqZwQ9WNTxx7gefP5TwnQ26pHIRpnQiP u7oWoa8jIJlximCgW5UeEm5Mp2SIuQINBFVtaNcBEADf5nDaWZlx1pNvLRsaYrq8pl4dzEAX BBqDk8S+hpjwkkjs4RyQjsyI2apb1qbkxIcZ0Xy3bH+Ejnli77cEsZEuU7PmWgjP3+jodW8m s3h/RKy8xa7L3OghjsF7fP5RJ4osFaTeX+lOG4dopPdFj6UCKjiPJ6MIeyBNfEIX3+OQJ8ux clBh0O7CHKcI8mUiSkTVmKSB5ErIwbp/uy8i3tPjI/gfXKzDz/wmU/ekcGg2QNa0F3lkvsGm EEfpqsGxOi5U+0eAqEBNTYuIdsHvw5GbCovRmYS4JsirvUrHgSaufrIHbNwgdwe8YwfIxJJt Kt/lACr5nykIy5QGEvh2BETM4MSjJ0GK+JuFk2+2pqCGx0JDg4CgL8414kSGWwMyvq9vXOQj fytCbHbkq0eiTya+EzaxqVFjleVqGqEi632Uf8Tby90wLy7JMWTtF7p/EWFRAFQq7tfvQZGH W6+HKSpRjE4XJn4sZXKn/zjeTIPYIYhC04Qldo7ScJoIz5MzhGogAMVNaZhNfc0yDAQhkNZm 2YLLVG1dW+L8gI6QmamJaRYR+t0ZAmhtj1MZ0KfaBzXxHc5XkVPH9cv4dLjf3YkcgyR9QGYY ZyMwqZlntb6cN2oiur8bI4ygyk/xO01zQ+DJpqQD+Hm9Hczm8ROWDaNWWqTHCS+PmOxzscHT DtgPlwARAQABiQIfBBgBAgAJBQJVbWjXAhsMAAoJEAfTEC7xobmtwP8P/itS8qg5lQJ92JO5 53x3zgKVSFzBmsTM9Z2ITNU4PaZMhKrm85SFD0IlgqbQkOSwZKkSBz+VsnPbKzDCa4RD4zRz XvDPE+oyKCRUjJn1QWhIBJK0vfe3w5ZTBYN/7x+/PvNBP9CjCD74tvE57mkg3LbuOYNg93g/ IzhDhXPV6vk2VuPfBLYre2s8juIPJtzC0h3QL51beMMzETjejRGLEVsmDuVqG3JN2dxukLDC 2x9qSTPrTz0O8o6x2Mw6zmG7wE8z0TrGKQwsqBdpMFzdm6NA59ot5y3glIiH6Kh6cidG9CU/ uciuefQ5uCRcjmjDwpvYHxwrZ6x4rmqkOEqabAVXLH+hthk8shf1aiUd7jeRvNa490/xFU9h XCWg9nlhkjpPBFY0T+jUdVcScX6fdsA6HSnkZhSHpCzU4uSzAlfS+yFYhsbzk/suzSJmb0Ag CCnpE7pFX24cwPdBfDKcHSLD93TO5Tryzi/kQ3K3JGzsu36NkUx/rA4b6NUv4dyhaPwPXFoS asyPmX62TNwt3bx8sxZzCCql6G/rElxw/lpph4sc5jYtAawAgFpn1eB/OK3YsWxkO6/+Y62W 8a5Z+GM5iyBErjXzkW/41DDgDl4dL6byHisdoS8NEvMHnnvMPM+YGe+tW/cyQ4ttdtGTHRZb vOeLhOSE7dkLQ9FYmiKO
Message-ID: <a581550b-c722-dcad-2838-a68dba002c4f@web3.foundation>
Date: Sun, 23 Jun 2019 21:42:27 +0200
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:60.0) Gecko/20100101 Thunderbird/60.7.0
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/cfrg/Yw9N7P09bdUFmx9KaNFwExUyrwE>
Subject: Re: [Cfrg] Adoption request: draft-hdevalence-cfrg-ristretto
X-BeenThere: cfrg@irtf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Crypto Forum Research Group <cfrg.irtf.org>
List-Unsubscribe: <https://www.irtf.org/mailman/options/cfrg>, <mailto:cfrg-request@irtf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cfrg/>
List-Post: <mailto:cfrg@irtf.org>
List-Help: <mailto:cfrg-request@irtf.org?subject=help>
List-Subscribe: <https://www.irtf.org/mailman/listinfo/cfrg>, <mailto:cfrg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Sun, 23 Jun 2019 19:43:25 -0000

Just a note in favor of adopting Ristretto:

We implemented an NSEC5 style VRF and 3-round trip Schnorr
multi-signatures, using Ristretto for the group and recommending merlin
(STROBE) for hashing:  https://github.com/w3f/schnorrkel/

https://github.com/w3f/schnorrkel/blob/master/src/vrf.rs
https://github.com/w3f/schnorrkel/blob/master/src/musig.rs

It attempts to strike a reasonable balance between missuse resistance
and flexibility, so we expose the DLEQ proofs underlying the VRF, but
address malleability aggressively to support “HDKD", and session type
are used for multi-signatures.

There is nothing in schnorrkel that really requires Ristretto of course.
 We believe however that schnorrkel supplies "the basics" for Ristretto
in a manor that works relatively consistently with the rest of the dalek
and bulletproofs ecosystem.  These basics should prove handy since no
map from Ristretto to Ed25519 will be standardised.

Best,
Jeff