Re: [TLS] Curve25519 draft

[Eric Rescorla <[e-mail]>]

On Sun, May 4, 2014 at 4:44 PM, Watson Ladd <[e-mail]> wrote:

> Dear all,
> My impression of the CFRG meeting result was that Curve25519 was fine,
> and that drafts describing it were going to be written this summer. In
> TLS we can proceed with this draft it looks like.
>
> Am I misremembering/misunderstanding?
>

My understanding was a bit more modest, namely that the CFRG intended
to produce a recommendation by IETF Toronto and that Curve25519 was
probably the leading contender for that recommendation at the 128-bit
security level, but that they weren't quite ready to commit. So people were
to go off and do drafts with an aim to have an answer by YYZ. Though
perhaps I am the one who misunderstood.

In either case, as a matter of process I would expect (or at least hope)
that
the CFRG will send us some sort of formal statement of their recommendation
so that we have something specific to refer to for future.

-Ekr