Re: [Cfrg] Call for adoption: draft-hdevalence-cfrg-ristretto-01

I'm in favor of adoption as well, though am curious to know where folks stand on the issues discussed in [1] and earlier messages. What is the plan for reconciling this with the hash-to-curve draft? Of the three options Filippo outlines in [2], the third seems the most appealing and probably the most workable, though does muddy the "curve" focus of hash-to-curve.

Best,
Chris

[1] https://mailarchive.ietf.org/arch/msg/cfrg/w91AdGVdLWccafiPub862MObk5c
[2] https://mailarchive.ietf.org/arch/msg/cfrg/p_r53FtGcaNSB_HwIV0J9FSgYbg

On Wed, Sep 18, 2019, at 10:38 AM, Richard Barnes wrote:
> I am not in a position to evaluate the mathematics of this proposal, 
> but the idea of a curve that files down some of the unnecessary "sharp 
> edges" of Curve25519 is welcome. 
>
> As has been discussed previously on this list, it is helpful in some 
> contexts to have DH groups in which scalar multiplication commutes with 
> the private-to-public-key map, since this allows public keys to be 
> transformed in a way that the corresponding transformations on private 
> keys are clear. This is the case for the traditional NIST ECDH curves, 
> but not for Curve25519, due to the "clamping" it requires. If I 
> understand correctly, Ristretto would have this property, and so would 
> in some cases effectively be a more useful version of Curve25519.
> 
> --RLB
> 
> On Wed, Sep 18, 2019 at 12:45 PM Alexey Melnikov 
> <alexey.melnikov@isode.com> wrote:
> > Dear CFRG participants,
> > 
> >  This email commences a 2-week call for adoption for 
> >  draft-hdevalence-cfrg-ristretto-01 that will end on October 2nd 2019:
> > 
> > https://datatracker.ietf.org/doc/draft-hdevalence-cfrg-ristretto/
> > 
> >  Please give your views on whether this document should be adopted as a 
> >  CFRG draft, and if so, whether you'd be willing to help work on 
> >  it/review it. Please reply to this email (or in exceptional 
> >  circumstances you can email CFRG chairs directly at cfrg-chairs@ietf.org).
> > 
> >  Thank you,
> >  Alexey (for the chairs)
> > 
> >  _______________________________________________
> >  Cfrg mailing list
> > Cfrg@irtf.org
> > https://www.irtf.org/mailman/listinfo/cfrg
> _______________________________________________
> Cfrg mailing list
> Cfrg@irtf.org
> https://www.irtf.org/mailman/listinfo/cfrg
>