Re: [TLS] Additional Elliptic Curves (Curve25519 etc) for TLS ECDH key agreement

[Sean Turner <[e-mail]>]

Rich,

Stephen and I will come up with a plan.  I hope to get back to you fairly soon being that Stephen and I chat at least once a week and we’ve known this was coming down the pipe.

spt

On Jan 12, 2014, at 14:21, Salz, Rich <[e-mail]> wrote:

> I don't want this question to get lost in the general discussion so I am explicitly addressing this to the AD's
> 
>>> I think we should keep this consistency and have the point format for 
>>> the new curves defined in one standard, whatever that might be.
> 
>> Since this format may be used by more than just TLS, and was originally defined outside the IETF, what would
>> be the most appropriate place to discuss extending it?
> 
> Some folks have been working on a concrete proposal, which is that we "take" 0x41 as a new marker byte in ECPoint, and use that to mean "key format defined by the curve"  Ask IANA to maintain a curve point-format registry.  For example, Curve25519 would have 0x41 followed by the 32 bytes of x-value for the key.
> 
> So, where should such a document be started?
> 
> Many of us are feeling pressure to implement ECDHA to get PFS for our customers, and see the efficiency of Curve25519 as very important.  That is, the  clock is ticking...
> 
> 	/r$
> 
> --  
> Principal Security Engineer
> Akamai Technology
> Cambridge, MA
>