Re: [Cfrg] On the use of Montgomery form curves for key agreement

[Stephen Farrell <[e-mail]>]

Hiya,

On 02/09/14 22:37, Andrey Jivsov wrote:
> 10% penalty in dual-key uses

I'm not clear what you mean by this, in terms of what protocol
it would affect.

Can you give me an example of such an IETF protocol? Without
having thought much about it, I think there are always different
codepoints allocated for DH and signatures, and I doubt we'd
want the same private values shared anyway, so I'm not sure
if that's a real or a theoretical issue.

Thanks,
S.