I don't know that isogeny to a short Weierstrass curve actually solves anything, unless we transmit the points in that manner. But then a lot of the security gains vanish: we need to validate points, formulas get slow, etc. Sincerely, Watson
On Sat, Feb 1, 2014 at 4:36 PM, Paulo S. L. M. Barreto <[email protected]> wrote: > How about x^2 + y^2 = 1 + 3435*x^2*y^2 (or an isogenous curve, (-1)-twist, > etc) over the NIST prime p_384 := 2^384 - 2^128 - 2^96 + 2^32 - 1? > > Cheers, > > Paulo. > > > _______________________________________________ > Curves mailing list > [email protected] > https://moderncrypto.org/mailman/listinfo/curves -- "Those who would give up Essential Liberty to purchase a little Temporary Safety deserve neither Liberty nor Safety." -- Benjamin Franklin _______________________________________________ Curves mailing list [email protected] https://moderncrypto.org/mailman/listinfo/curves
