Re: [TLS] Curve25519 in TLS and Additional Curves in TLS

[Nikos Mavrogiannopoulos <[e-mail]>]

On Wed, 2014-04-09 at 13:17 +0100, Alyssa Rowan wrote:

> >I believe you have already made your point several times. I think it is
> >important to see comments from people who plan or work on implementing
> >this draft, how each format affects them and whether there is a need
> >for
> >little-endian.
> Don't we already seem to have consensus on little-endian, and that is what will be in the revised draft-04?

I believe that you summarized the issue very nicely in a previous
e-mail, but my reading of having a consensus for little-endian is
different than yours.

As far as I am concerned, I do not see why an implementation which will
not use the existing code, must treat the endianness of points from
curve25519 differently than the points of any other curve in TLS. In any
case, the arguments are already presented and that's what I mentioned to
Rich. I think we need more input from other people who plan or are
already implementing this curve in TLS.

regards,
Nikos