Re: [Cfrg] Actual security levels for IETF crypto

On Fri, Oct 31, 2014 at 7:39 AM, Benjamin Black <b@b3k.us> wrote:
> Right, I didn't say don't pick NUMS. I said I believe the process should've
> gone a direction it did not, which would've rejected _ALL_ current
> candidates in favor of CFRG generating new ones. That is no more my saying
> "don't pick NUMS" than your saying you want genus 2 on the table is the same
> as your saying "don't pick Curve25519".

The unimportant question is why would we reject candidates for existing?

The important question is:
What's the case for NUMS vs. the other curves? Or do I have to go
write this email myself?
>
> On Fri, Oct 31, 2014 at 7:35 AM, Watson Ladd <watsonbladd@gmail.com> wrote:
>>
>> On Fri, Oct 31, 2014 at 7:31 AM, Benjamin Black <b@b3k.us> wrote:
>> > Watson,
>> >
>> > Where exactly did I say "don't pick NUMS"?
>>
>> On October 29
>> "I've also said repeatedly that we should be starting from
>> requirements and then consider _generating_ curves to meet them,
>> rather than limiting ourselves to the curves at hand or trying to
>> contort the requirements to match an existing favorite."
>>
>> That seems to suggest that we don't pick any curves, but instead
>> generate new ones.
>>
>> >
>> >
>> > b
>> >
>> > On Fri, Oct 31, 2014 at 7:14 AM, Watson Ladd <watsonbladd@gmail.com>
>> > wrote:
>> >>
>> >> On Fri, Oct 31, 2014 at 7:10 AM, Stephen Farrell
>> >> <stephen.farrell@cs.tcd.ie> wrote:
>> >> >
>> >> >
>> >> > On 31/10/14 14:05, Richard Barnes wrote:
>> >> >> The idea that whiz-bang new crypto is the main barrier to 100% HTTPS
>> >> >> adoption seems rather naïve.  It helps,
>> >> >
>> >> > I agree. Of course, having CFRG decide on precisely
>> >> > which whiz-bang new crypto would be a good next step:-)
>> >>
>> >> But our choices are not the fastest ones! We've decided to have genus
>> >> 1 prime, no CM, which is a very conservative choice, but not
>> >> necessarily the fastest.
>> >>
>> >> Anyway, since Benjamin Black has said he doesn't actually think we
>> >> should pick NUMS, but do our own picking, I think the answer is
>> >> clear...
>> >> >
>> >> > S.
>> >> >
>> >> > _______________________________________________
>> >> > Cfrg mailing list
>> >> > Cfrg@irtf.org
>> >> > http://www.irtf.org/mailman/listinfo/cfrg
>> >>
>> >>
>> >>
>> >> --
>> >> "Those who would give up Essential Liberty to purchase a little
>> >> Temporary Safety deserve neither  Liberty nor Safety."
>> >> -- Benjamin Franklin
>> >>
>> >> _______________________________________________
>> >> Cfrg mailing list
>> >> Cfrg@irtf.org
>> >> http://www.irtf.org/mailman/listinfo/cfrg
>> >
>> >
>>
>>
>>
>> --
>> "Those who would give up Essential Liberty to purchase a little
>> Temporary Safety deserve neither  Liberty nor Safety."
>> -- Benjamin Franklin
>
>

-- 
"Those who would give up Essential Liberty to purchase a little
Temporary Safety deserve neither  Liberty nor Safety."
-- Benjamin Franklin