Re: [TLS] (selection criteria for crypto primitives) Re: sect571r1

Jeffrey Walton <> Thu, 16 July 2015 02:27 UTC

Return-Path: <>
Received: from localhost ( []) by (Postfix) with ESMTP id 543071B34ED for <>; Wed, 15 Jul 2015 19:27:13 -0700 (PDT)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id qFDEk2Qeq6na for <>; Wed, 15 Jul 2015 19:27:11 -0700 (PDT)
Received: from ( [IPv6:2607:f8b0:4001:c05::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by (Postfix) with ESMTPS id 96AF61B34EC for <>; Wed, 15 Jul 2015 19:27:11 -0700 (PDT)
Received: by igbpg9 with SMTP id pg9so3618659igb.0 for <>; Wed, 15 Jul 2015 19:27:11 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;; s=20120113; h=mime-version:reply-to:in-reply-to:references:date:message-id :subject:from:to:cc:content-type; bh=Ry+7lhsvr64l/VPhEu2Opuql4YpCfwlvQHpQBDLUhD8=; b=LqDJdpa1qPe2iBk+++Cgqiii42S5rB9xcF+PeNu+QyU9Jm35wBacBs06MI7fRK+fu7 n1J7ADB9QLF9CHloqAb179lPGT7iYyLEM/TMvd23/B6/Y46qoI+hjTdlZkf3m9L7ybGh 1tqqjcjtNBoH25TZQ5+vhPQWkD33gWq8tLIWsdiUa42PZwWqmtqqSs7eS7uER+yc877k ey8rF84nccnk1YFAby3yeLj/VMU+BMlt+zUFrw/v4R7cEL7Jx8r+c5NABRuGKe/fJ21e XLdNfuYYKPgQBEITToiSAkc5vsTKpIn4U4QrLkE8cn6eJimPkf7KEjALvJEQvCBPNQGC ylEw==
MIME-Version: 1.0
X-Received: by with SMTP id m5mr1410429igv.60.1437013631092; Wed, 15 Jul 2015 19:27:11 -0700 (PDT)
Received: by with HTTP; Wed, 15 Jul 2015 19:27:11 -0700 (PDT)
In-Reply-To: <>
References: <> <>
Date: Wed, 15 Jul 2015 22:27:11 -0400
Message-ID: <>
From: Jeffrey Walton <>
To: Rene Struik <>
Content-Type: text/plain; charset=UTF-8
Archived-At: <>
Cc: "<>" <>
Subject: Re: [TLS] (selection criteria for crypto primitives) Re: sect571r1
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Thu, 16 Jul 2015 02:27:13 -0000

> It seems prudent to keep some diversity of the gene pool and not only have
> curves defined over prime curves. Similarly, one should perhaps have some
> diversity of gene pool criteria within the set of recommend curves and not
> only include special primes. Should some problem with a particular subclass
> show up over time, one then at least has other classes available.
> On a general note, I do not understand what is wrong with having a
> dictionary of curves that is well-specified, but whose members are not all
> widely used. To my knowledge, having a dictionary does not force everyone to
> use every term in this (mandatory vs. optional to implement vs. mandatory to
> use, etc.).

Related, see Dan Geer's "Heartbleed as Metaphor",

Geer says, "Nature teaches that monocultures are so unnatural as to
require constant intervention to maintain."