[TLS] Curve25519 in TLS and Additional Curves in TLS

[Simon Josefsson <[e-mail]>]

All,

I have updated the Curve25519 draft.  I believe people are implementing
Curve25519 for TLS.  My idea of adding the "additional" curves to the
same draft seems like a mistake, or at least the timing of doing it was
a mistake.  Merging all curves into one draft makes it harder to
evaluate consensus and maturity around the Curve25519 part, which I
hope/believe we are approching.  Thus, I have split the draft into two
drafts:

1) Curve25519 for TLS.  This was the original scope of the draft.  The
URL is: <http://tools.ietf.org/html/draft-josefsson-tls-curve25519>.  As
far as I know, there are no outstanding issues, and it is possible to
implement and deploy Curve25519 in TLS following the draft.  Please
prove me wrong with comments or preferrably patches to the draft.

2) Additional curves for TLS.  This reflect the idea I had recently
after reading draft-ladd-safecurves.  However it seems there is still
many things to discuss and that it is not near the maturity of the
curve25519 part.  The following draft is also pending on the CFRG
discussions and maturity of draft-ladd-safecurves.
<http://tools.ietf.org/html/draft-josefsson-tls-additional-curves>.
Several people suggested to remove some curves from the list, and I'm
inclined to agree, but haven't made the change yet.  I'm not sure we
have a solid understanding of which curves makes sense and which doesn't
yet.

Eventually the drafts may be merged, if/when closure is reached on the
open issues for the second draft.  But I don't have high hopes that will
happen in the near term, and I believe there is growing interest in
moving forward with the first draft.

The drafts are on gitorious, if anyone prefers to send patches that way,
see: https://www.gitorious.org/ietf-simon/tls-curve25519/

Cheers,
/Simon