Re: [Cfrg] Preliminary disclosure on twist security ...

[Dan Brown <[e-mail]>]

Not sure why this first appeared as blank, sorry about that.  I've pasted
the text below for a 2nd try:

> -----Original Message-----
> From: Dan Brown

RFC 3979 "strongly encourages" a "preliminary disclosure" for any technology

being "seriously considered".

I am not sure which of this RG list or if 
http://www.ietf.org/ipr/file-disclosure.html is the correct place to make
such 
a preliminary disclosure. The RG list is more convenient for me, so here it 
goes.

Upon review today, I noticed that US Patent 6,563,928 B1, Claim 59,
supported 
in interpretation by reference to the patent specification's Column 5, lines

37-46 (which describes the case Zp*, but carries over, per the claim, to the

elliptic curve case) seems to anticipate some aspects of twist security that

are, arguably, exactly those aspects critical to avoiding an attack.  As
such, 
the patent holder may try to assert this against implementations of twist 
security.   Accordingly, I am disclosing this possibility.

Best regards,

Dan