Re: [Lwip] I-D Action: draft-ietf-lwig-curve-representations-05.txt

[Mohit Sethi M <[e-mail]>]

Hi Rene,

Thanks for addressing the comments. I wasn't looking for exact computational cost comparisons and rather some hints on what to expect if I re-use the underlying implementation of a different curve. Your statement "the overall cost differential is somewhere in the interval [1.00 - 1.25]" is useful (and perhaps sufficient).

I had one remaining suggestion. RFC 7942 (https://tools.ietf.org/html/rfc7942) describes how to improve awareness of running code. Perhaps you could add a section on implementations of Wei25519: https://github.com/ncme/c25519 and that tinydtls https://github.com/ncme/tinydtls now supports Wei25519.

--Mohit

On 5/15/19 10:21 PM, Rene Struik wrote:
Dear colleagues:

I slightly updated the draft to address Mohit Sethi's comment [1] on trade-offs between code reuse and computational efficiency. To this end, I added a little section (now Section 6) on "implementation considerations" - see[2].

As already suggested in [3], I did not give an explicit computational cost comparison, since this is highly device and application dependent and alone would not do justice other considerations that come into play when deciding on a crypto implementation strategy.

Best regards, Rene

[1]https://mailarchive.ietf.org/arch/msg/lwip/DQ5oYwFusICBx_llv1Wenc1EZCQ
[2] https://tools.ietf.org/html/draft-ietf-lwig-curve-representations-05#section-6
[3] https://mailarchive.ietf.org/arch/msg/lwip/vSnhe1lO03AfLONxHGmixuP4z64

On 5/15/2019 3:04 PM, [e-mail]<mailto:[e-mail]> wrote:

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Light-Weight Implementation Guidance WG of the IETF.

        Title           : Alternative Elliptic Curve Representations
        Author          : Rene Struik
        Filename        : draft-ietf-lwig-curve-representations-05.txt
        Pages           : 62
        Date            : 2019-05-15

Abstract:
   This document specifies how to represent Montgomery curves and
   (twisted) Edwards curves as curves in short-Weierstrass form and
   illustrates how this can be used to carry out elliptic curve
   computations using existing implementations of, e.g., ECDSA and ECDH
   using NIST prime curves.



The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-lwig-curve-representations/

There are also htmlized versions available at:
https://tools.ietf.org/html/draft-ietf-lwig-curve-representations-05
https://datatracker.ietf.org/doc/html/draft-ietf-lwig-curve-representations-05

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-ietf-lwig-curve-representations-05


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

_______________________________________________
Lwip mailing list
[e-mail]<mailto:[e-mail]>
https://www.ietf.org/mailman/listinfo/lwip



--
email: [e-mail]<mailto:[e-mail]> | Skype: rstruik
cell: [phone] | US: [phone]



_______________________________________________
Lwip mailing list
[e-mail]<mailto:[e-mail]>
https://www.ietf.org/mailman/listinfo/lwip