Re: [Cfrg] I-D Action: draft-irtf-cfrg-hash-to-curve-08.txt

This update carries a number of important changes, including, though not limited to:

- Domain separation mitigations for expand_message_xmd (as part of hash-to-field).
- Mapping function fixes and clarifications. Elligator 2 alignment is one such update.
- An overall reduction in suites. There is now one recommended RO and NU suite per target curve.
- Expanded test vectors, including those for expand_message. 
- Much improved security considerations text, particularly around domain separation guarantees.
- Alignment with the VRF specification [1].

We believe the document is now ready for RGLC, and would appreciate reviews and feedback to help get it across the finish line.

Thanks!
Chris

[1] https://github.com/fcelda/nsec5-draft/pull/35

On Mon, Jun 1, 2020, at 4:17 PM, internet-drafts@ietf.org wrote:
> 
> A New Internet-Draft is available from the on-line Internet-Drafts directories.
> This draft is a work item of the Crypto Forum RG of the IRTF.
> 
>         Title           : Hashing to Elliptic Curves
>         Authors         : Armando Faz-Hernandez
>                           Sam Scott
>                           Nick Sullivan
>                           Riad S. Wahby
>                           Christopher A. Wood
> 	Filename        : draft-irtf-cfrg-hash-to-curve-08.txt
> 	Pages           : 156
> 	Date            : 2020-06-01
> 
> Abstract:
>    This document specifies a number of algorithms for encoding or
>    hashing an arbitrary string to a point on an elliptic curve.
> 
> 
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-irtf-cfrg-hash-to-curve/
> 
> There are also htmlized versions available at:
> https://tools.ietf.org/html/draft-irtf-cfrg-hash-to-curve-08
> https://datatracker.ietf.org/doc/html/draft-irtf-cfrg-hash-to-curve-08
> 
> A diff from the previous version is available at:
> https://www.ietf.org/rfcdiff?url2=draft-irtf-cfrg-hash-to-curve-08
> 
> 
> Please note that it may take a couple of minutes from the time of submission
> until the htmlized version and diff are available at tools.ietf.org.
> 
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
> 
> 
> _______________________________________________
> Cfrg mailing list
> Cfrg@irtf.org
> https://www.irtf.org/mailman/listinfo/cfrg
>