Re: [TLS] The PAKE question and PSK

[Nico Williams <[e-mail]>]

On Wed, Apr 2, 2014 at 1:38 PM, Dan Harkins <[e-mail]> wrote:
>   Check out Appendix A of draft-ietf-tls-pwd-04. Do you know of
> any running code that implements TLS ciphersuites that perform EKE
> with Elligator curves?

And in constant time.  Still, we're inching closer to having all the
pieces.  I did find one liberally-licensed C implementation of
Elligator just now, and an unlicensed implementation in Go.  We may
soon well have enough Elligator implementations to permit interop
testing and widespread implementation of EKE w/ Elligator.  And, of
course, one can always write one's own implementation.

Nico
--