Re: [Cfrg] Safecurves draft

[Manuel Pégourié-Gonnard <[e-mail]>]

On 08/01/2014 21:29, Dan Harkins wrote:
>   While it's certainly useful to get these curves defined in an IETF
> document, getting them used by any protocol will require some
> more work from you.

And/or from others :) For example, Simon Josefsson and I are already working on
a draft for using the Montgomery curves in TLS (for ECDHE at least).

> You should get OIDs defined for each of
> them if they don't exist already. You should write up separate
> drafts for inclusion of these curves into the protocols' various
> IANA-managed repositories-- yes, sadly there are many. And
> for protocols which allow for in-line passing of complete
> domain parameter sets (like TLS) you'll need to modify the
> data structure used (doesn't look like these could be used with
> the "explicit_prime" ECCurveType, for instance).
> 
Concerning TLS, it's probably not useful to allow online passing of the complete
domain parameters, since the NamedCurve way is used by (almost?)
everyone.

But yes, there is some per-protocol work to be done, obviously.

Manuel.