Re: [Cfrg] I-D Action: draft-irtf-cfrg-hash-to-curve-04.txt

"Riad S. Wahby" <rsw@jfet.org> Mon, 22 July 2019 20:22 UTC

Return-Path: <rswatjfet.org@gmail.com>
X-Original-To: cfrg@ietfa.amsl.com
Delivered-To: cfrg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A86391200A3 for <cfrg@ietfa.amsl.com>; Mon, 22 Jul 2019 13:22:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.56
X-Spam-Level:
X-Spam-Status: No, score=-1.56 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FORGED_FROMDOMAIN=0.091, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.249, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LbjE67pcY228 for <cfrg@ietfa.amsl.com>; Mon, 22 Jul 2019 13:22:52 -0700 (PDT)
Received: from mail-vk1-f180.google.com (mail-vk1-f180.google.com [209.85.221.180]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8DA7212008C for <cfrg@irtf.org>; Mon, 22 Jul 2019 13:22:52 -0700 (PDT)
Received: by mail-vk1-f180.google.com with SMTP id f68so8191679vkf.5 for <cfrg@irtf.org>; Mon, 22 Jul 2019 13:22:52 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:in-reply-to:references:mime-version :content-transfer-encoding:subject:to:from:message-id; bh=C3kNhT7crOc0x7tLZXXB2SvsPGh+bPtVeT+LVujJWMU=; b=NuA/jvV3Pntpg3OnADp3MtV85LZhgkamdYbSv1Gj90Mu1tJl3Fq5r0DZ8iUXQ4kswa smuwjxDUnVORcGZxMgGy9WSytgPfYZilWsANfOzljqdBON004aOdH13VnnFeNvQgBL4e D9GKabM64/W9VA1MM5W8hjPRUkFNAHns1ClvIWNQG76ZdrISGgZh4L4MZPVwP8XTisP3 5CC4FEL/SCXF+UOdVdpByyWKl+ufQQPwbE3OGkjtSGgEdIM5moBNmQF5sUx+1ANSI4/y rYr8+kcsGaygbXOsgC/sKKNR6yeP9smxmMDFzRO85gm18ftaWgWUD7OtS+Dvnk4Mn4XL +q1w==
X-Gm-Message-State: APjAAAWfl1ebRngdSeGcmYUy2PDJ6lcvP5p0WTHhH8HZS9L9oGg+gUAp hw60jsUiY+gx7kQf7BTo4lgtaqgY
X-Google-Smtp-Source: APXvYqxtuZ60qkkbMuev+b9ZZ+sW5TupsdAZeGzn+K/nFOFBBMob6PYsaoMNbAAAuuGnYv9Uzb714Q==
X-Received: by 2002:a1f:a74b:: with SMTP id q72mr11040233vke.55.1563826970921; Mon, 22 Jul 2019 13:22:50 -0700 (PDT)
Received: from ?IPv6:2001:67c:370:128:d950:dc09:ded9:328? ([2001:67c:370:128:d950:dc09:ded9:328]) by smtp.gmail.com with ESMTPSA id u5sm39355636uah.0.2019.07.22.13.22.48 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 22 Jul 2019 13:22:49 -0700 (PDT)
Date: Mon, 22 Jul 2019 16:22:45 -0400
In-Reply-To: <84012971-70cd-da2d-55b7-944635c92b65@web.de>
References: <46863a4d-e193-1697-058d-2c14106c317e@web.de> <84012971-70cd-da2d-55b7-944635c92b65@web.de>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
To: cfrg@irtf.org,=?ISO-8859-1?Q?Bj=F6rn_Haase?= <bjoern.m.haase@web.de>
From: "Riad S. Wahby" <rsw@jfet.org>
Message-ID: <F5C22BE6-7E24-43E8-B023-A5FF0A5EA960@jfet.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/cfrg/ZhGKrIEST9bQBHVQ1YHji8_9_kM>
Subject: Re: [Cfrg] I-D Action: draft-irtf-cfrg-hash-to-curve-04.txt
X-BeenThere: cfrg@irtf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Crypto Forum Research Group <cfrg.irtf.org>
List-Unsubscribe: <https://www.irtf.org/mailman/options/cfrg>, <mailto:cfrg-request@irtf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cfrg/>
List-Post: <mailto:cfrg@irtf.org>
List-Help: <mailto:cfrg-request@irtf.org?subject=help>
List-Subscribe: <https://www.irtf.org/mailman/listinfo/cfrg>, <mailto:cfrg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Mon, 22 Jul 2019 20:22:54 -0000

On July 22, 2019 4:08:25 PM EDT, "Björn Haase" <bjoern.m.haase@web.de>; wrote:
>The second simple question IMO is P384. I'd not consider Icart's mapping
>as long as the patents apply. I'd use plain SWU here.

The generalized version of Simplified SWU given in -04 also applies to P384. So the question of which map to use for P384 is an instance of the broader question you asked, namely, are we comfortable with the IPR situation surrounding Simplified SWU? (I don't know! but maybe we'll understand more about this soon.)

So: if P256 ends up using Simplified SWU, P384 can as well.

(I certainly agree that we should be leery of the Icart IPR issues.)

-=rsw