On Wed, Dec 3, 2014 at 7:09 PM, David Leon Gil <[email protected]> wrote: > On Sat, Nov 29, 2014 at 6:14 PM, David Leon Gil <[email protected]> wrote: >> egregious blunders are entirely mine, however.) > > Speaking of egregious blunders: those results are incorrect. I was > inadvertently omitting curves with small factors on the twist; the > real probability of a twist-secure curve is somewhat lower.
So, updated results on GitHub, same link. Probability of a prime order Weierstrass curve having a twist with cofactor 1: < ~2%. (Essentially unchanged.) Questions: - Are other SafeCurves properties independently distributed? - Or, relatedly, is there anything "special" about twist-secure curves (asides from them having a secure twist)? (By the way, does anyone have decent code for computing discriminants?) _______________________________________________ Curves mailing list [email protected] https://moderncrypto.org/mailman/listinfo/curves
