On Thu, Jul 06, 2023 at 03:35:44PM +0000, lgl island-resort.com wrote: > IMO the objective is to define as few as we can. “what if… “ and > “what about…” will lead us astray.
I think that any amount is either too few or too much. Too few as in missing something some application needs. Too much as in containing something causing problems for some application. > What I proposed has 3 for NIST fans and 4 for Bernstein fans. But, > given that Mbed TLS (a major crypto lib) doesn’t support Edwards yet > and 9053 doesn’t define any Edwards for encryption, makes me wonder > if we should just do the 3 for NIST fans. Curve25519 (underlying X25519) and Edwards25519 (underlying Ed25519) are very closely related. Same goes for (Curve448, X448, Edwards448, Ed448). In fact, the fastest known way to calculate x*G for Curve25519 is to calculate x*G for Edwards25519 and transform the result. And similarly for Curve448 and Edwards448. And in fact, Edwards448 base point was specifically chosen for that purpose. -Ilari _______________________________________________ COSE mailing list [email protected] https://www.ietf.org/mailman/listinfo/cose
