Re: [pkix] Edwards/DJB curves - New PKI(X) work?

[Anders Rundgren <[e-mail]>]

On 2014-08-14 16:51, Johannes Merkle wrote:
> Anders Rundgren wrote on 14.08.2014 13:36:
>> But the inclusion of new algorithms in X.509 structures sounds
>> like a PKI(X)-like task.
>>
>
> Well, "new algorithms" is not exactly the right term for introducing a new curve representation; it's rather a new
> semantic of public keys, digital signatures and cryptograms. (There are some people on the CFRG advocating
> standardization of simplified ECC-based signature algorithms, like Schnorr signatures, but currently, the discussion
> focuses on curves and their representation.) But essentially, you are right: if we want to use new semantics in PKIX,
> new specs for X.509 certs / CRLs, for CMS etc. would be needed.

I'm not a cryptographer you know :-)

Anyway, wouldn't you need algorithms also like EdDSA-SHA256 or would ECDSA-SHA256 apply?
Again, pardon a non-cryptographer for asking stupid/strange questions...

Anders

>
> However, it is yet too early for action. It is not yet clear, what exactly CFRG recommends to the tls WG. Even if
> Montgomery curves or Edwards curves are chosen, there is still the option of using traditional (Weierstrass)
> representation / semantic on-the-wire, as transformation is quite simple. See
> https://www.ietf.org/mail-archive/web/cfrg/current/msg04816.html
>
> Johannes
>