Re: [TLS] Additional Elliptic Curves (Curve25519 etc) for TLS ECDH key agreement

[Matt Caswell <[e-mail]>]

On 11 January 2014 19:51, Eric Rescorla <[e-mail]> wrote:
> On Sat, Jan 11, 2014 at 8:32 AM, Simon Josefsson <[e-mail]> wrote:
>> 1) Do we need all these curves defined for TLS?  What is the selection
>>    critera for including/exluding some of the curves?  Is that a TLS
>>    process, or an CFRG process?
>
> Speaking as chair:
>
> The TLS WG is not chartered (or qualified) to assess curves. What I
> believe is needed is for the IETF (whether directly or through the
> CFRG) to come to consensus on what curves we believe our
> protocols should support and then we can adopt them across
> the relevant security WGs, doing whatever protocol-specific
> work is required then.
>
> I've spoken with our AD about this a little bit, but as far as I know
> such an effort hasn't actually been started. Perhaps this is a topic
> for SAAG?

Isn't that exactly what Watson Ladd's draft is? That was initiated out
of discussions within CFRG, and is currently being debated by CFRG.

Matt