Re: [TLS] Testing consensus for adding curve25519 to the EC named curve registry

[Patrick Pelletier <[e-mail]>]

Given the doubt that's recently been cast on the NIST curves, is it time 
to revive the idea of adding curve25519 as a named curve?

--Patrick


On 3/1/10 4:20 PM, Adam Langley wrote:
> We would like to start testing EC DHE in order to give our users
> forward-secrecy.
>
> In order to do this cheaply, one of the curves that we would like to
> test with is curve25519[1]. There are several implementations of it
> [2][3][4] and it's 3-4x faster than NIST's p256 (as implemented in
> OpenSSL), while being constant-time.
>
> Curve25519 doesn't currently appear on IANA's list of named curves[5]
> and we would like to see it included.
>
> As a first step I'd like to ask if there are any objections?
>
>
> Cheers
>
> AGL
>
>
> [1] http://cr.yp.to/ecdh/curve25519-20060209.pdf
> [2] http://cr.yp.to/ecdh.html
> [3] http://code.google.com/p/curve25519-donna/
> [4] http://bench.cr.yp.to/results-dh.html
> [5] http://www.iana.org/assignments/tls-parameters/
>