Re: [Cfrg] Elliptic Curves - poll on security levels (ends on February 17th)

[Kurt Roeckx <[e-mail]>]

On Wed, Feb 18, 2015 at 10:44:33AM +0000, Alexey Melnikov wrote:
> Hi,
> To get some closure on the consensus poll:
> 
> On 10/02/2015 10:52, Alexey Melnikov wrote:
> >CFRG chairs are starting a poll, containing 2 initial questions:
> >
> >Q1: Should CFRG recommend a curve at the 192-bit security level?
> About 25% of people responded that they want to work on this (slightly more
> if we count people stating that as a second preference).
> Chairs are still discussing what should be done on this.
> 
> >Q2: Should CFRG recommend a curve at the 256-bit security level?
> About 54% of respondents want to work on this. So chairs think that a curve
> at this level should be included as a recommendation to IETF.

My interpration of the answers:
1) Release 128 asap?
- Unknown: 18
- Just do 128 for now: 14
- add others at the same time: 0

2) Which levels?
- Unknown: 5
- Only do 128, higher curves aren't needed: 1
- Something larger than 128, only 1 (ie 192, 256): 9
- Something larger than 192, only 1 (ie 207, 224, 256, 260): 11
- Two curves, one larger than 128, one larger then 192: 6
- Exactly 256 bit: 2

(I might have made some mistakes interpreting people)


Kurt