Re: [Dcrup] I do not like the dcrup ECC document

Just as a technical point:

ECDSA works with P-256, P-384, and P-521
EdDSA works with Curve25519 and Curve448

I read the text above as using EdDSA with Curve25519.

-Ekr

On Sun, Jul 9, 2017 at 1:34 PM, John Levine <johnl@taugh.com> wrote:

> In article <14cd0f4ff66348e495e0a7d0da8adc0e@usma1ex-dag1mb1.msg.corp.
> akamai.com> you write:
> >Speaking as an individual, I think the draft-ietf-dcrup-dkim-ecc is wrong.
> >
> >It specifies curve P256 and ECDSA.
>
> Here's what -03 says:
>
> 3.  EdDSA-SHA256 Signing Algorithm
>
>    The eddsa-sha256 signing algorithm computes a message hash as defined
>    in section 3 of [RFC6376], and signs it with Ed25519, the EdDSA
>    algorithm using the edwards25519 curve, as defined in in RFC 8032
>    section 5.1 [RFC8032].  The signing algorithm is PureEdDSA as defined
>    in RFC 8032 section 4, since the input to the signing algorithm has
>    already been hashed.  The DNS record for the verification public key
>    MUST have a "k=eddsa" tag to indicate that the key is an EdDSA rather
>    than RSA key.
>
> If that's not right, please send text.
>
> R's,
> John
>
> _______________________________________________
> Dcrup mailing list
> Dcrup@ietf.org
> https://www.ietf.org/mailman/listinfo/dcrup
>