Re: [pkix] Edwards/DJB curves - New PKI(X) work?

Michael StJohns <mstjohns@comcast.net> Tue, 19 August 2014 16:01 UTC

Return-Path: <mstjohns@comcast.net>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 859941A0421 for <pkix@ietfa.amsl.com>; Tue, 19 Aug 2014 09:01:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.667
X-Spam-Level:
X-Spam-Status: No, score=-2.667 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RP_MATCHES_RCVD=-0.668, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IXN2cB4u-uWo for <pkix@ietfa.amsl.com>; Tue, 19 Aug 2014 09:01:32 -0700 (PDT)
Received: from qmta01.emeryville.ca.mail.comcast.net (qmta01.emeryville.ca.mail.comcast.net [IPv6:2001:558:fe2d:43:76:96:30:16]) by ietfa.amsl.com (Postfix) with ESMTP id 04BC71A03BD for <pkix@ietf.org>; Tue, 19 Aug 2014 09:01:31 -0700 (PDT)
Received: from omta14.emeryville.ca.mail.comcast.net ([76.96.30.60]) by qmta01.emeryville.ca.mail.comcast.net with comcast id gdvj1o0021HpZEsA1g1Xts; Tue, 19 Aug 2014 16:01:31 +0000
Received: from [192.168.1.103] ([68.34.113.195]) by omta14.emeryville.ca.mail.comcast.net with comcast id gg1U1o00D4D0RQL8ag1VUQ; Tue, 19 Aug 2014 16:01:31 +0000
References: <53EC3F1F.6090706@gmail.com> <53EC9E72.8030701@bbn.com> <53EC9F34.7090403@gmail.com> <53ECCCE4.2060603@secunet.com> <53ECDE4F.6020009@gmail.com> <53EDB8F3.3020400@secunet.com> <20140817032441.012621A0066@a.mx.secunet.com> <53F1BF84.6010504@secunet.com> <20140818180257.2680D1A0711@ietfa.amsl.com> <CA+i=0E4uKoLogYUTd8CuqOXtva0tekeZq5x4_3M=-bs-V73hAg@mail.gmail.com>
Mime-Version: 1.0 (1.0)
In-Reply-To: <CA+i=0E4uKoLogYUTd8CuqOXtva0tekeZq5x4_3M=-bs-V73hAg@mail.gmail.com>
Content-Type: multipart/alternative; boundary="Apple-Mail-F5FCA72C-D65F-4D4E-B36D-5A0E64A54C0F"
Content-Transfer-Encoding: 7bit
Message-Id: <BD4BB274-0167-44D9-8AD3-79EC552CBB4A@comcast.net>
X-Mailer: iPad Mail (11D257)
From: Michael StJohns <mstjohns@comcast.net>
Date: Tue, 19 Aug 2014 12:01:30 -0400
To: Erwann Abalea <eabalea@gmail.com>
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=comcast.net; s=q20140121; t=1408464091; bh=hGvEmm0kFKONivAEHSzBLpW9/EQWvcHK5ntF/q0cKwo=; h=Received:Received:Mime-Version:Content-Type:Message-Id:From: Subject:Date:To; b=Dh6dvEyIPztryV/WUpbTHVVzOV4ehOc3XFNN6eZuFPyFMEnaLltrBNB1FwPLQ2ftq lTk4zFjYewp8Ycbk4+N5qH76+vyhffchTIKUgPJm2cfntzYXohQIBqs7/Y3J0N9lwf TdEdfW1P73CAwR7PvykCDsomA7pBx2uceQKRG2I1XYrcrXbFcnelZFg3XyZoTsZcch +qGDz54axc6eO1cG575Yj7k6I5k7mofU3Ec1AuEmILCSJPqRqgX2zrpgXpiUTa1Osd Tt8POtxpGR9wHs3WZT/l+jI/Mbo0LGW/o3NZ8x3oGiy4uDdwfIpY8+8JgTocibRVRg OjXrtcdrl30EA==
Archived-At: http://mailarchive.ietf.org/arch/msg/pkix/egA-AnoEo7fpe0PL-LuCpUxViGU
Cc: "<pkix@ietf.org>" <pkix@ietf.org>
Subject: Re: [pkix] Edwards/DJB curves - New PKI(X) work?
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix/>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 19 Aug 2014 16:01:41 -0000


Sent from my iPad

> On Aug 19, 2014, at 6:46, Erwann Abalea <eabalea@gmail.com> wrote:
> 
> 
> 2014-08-18 20:02 GMT+02:00 Michael StJohns <mstjohns@comcast.net>:
>> 
>> In DJB's ED25519, the signature is actually a single integer, and tucked away in his paper is the notation that the representation of that integer is little endian.
> 
> Even in Ed25519 the signature consists of two 256bits integers. Little/big endian representation doesn't care here.
> R is a compressed version of a point (concatenation of y and lsb of x).
> S is the standard S.

*sigh* you're correct.  I misread a summary of the DJB paper.   Mike