curves  

Messages by Thread

• • Re: [curves] Ed448-Goldilocks on NEON; point encoding Trevor Perrin
• [curves] Threshold ECDSA / comparison to Schnorr Trevor Perrin
  • Re: [curves] Threshold ECDSA / comparison to Schnorr Frederic Jacobs
  • Re: [curves] Threshold ECDSA / comparison to Schnorr Watson Ladd
  • Re: [curves] Threshold ECDSA / comparison to Schnorr Trevor Perrin
  • Re: [curves] Threshold ECDSA / comparison to Schnorr Tony Arcieri
  • Re: [curves] Threshold ECDSA / comparison to Schnorr Tim Ruffing
  • Re: [curves] Threshold ECDSA / comparison to Schnorr Trevor Perrin
  • Re: [curves] Threshold ECDSA / comparison to Schnorr Tom Ritter
  • Re: [curves] Threshold ECDSA / comparison to Schnorr Steven A Goldfeder
  • Re: [curves] Threshold ECDSA / comparison to Schnorr Trevor Perrin
  • [curves] Fwd: Threshold ECDSA / comparison to Schnorr Trevor Perrin
  • [curves] Threshold ECDSA / comparison to Schnorr Gregory Maxwell
  • Re: [curves] Threshold ECDSA / comparison to Schnorr Trevor Perrin
• [curves] SPAKE2 and SPAKE2 Elligator Edition Mike Hamburg
  • Re: [curves] SPAKE2 and SPAKE2 Elligator Edition Michael Scott
  • Re: [curves] SPAKE2 and SPAKE2 Elligator Edition Michael Scott
  • Re: [curves] SPAKE2 and SPAKE2 Elligator Edition Mike Hamburg
  • Re: [curves] SPAKE2 and SPAKE2 Elligator Edition Michael Scott
  • Re: [curves] SPAKE2 and SPAKE2 Elligator Edition Watson Ladd
  • Re: [curves] SPAKE2 and SPAKE2 Elligator Edition Trevor Perrin
• [curves] PAKE questions Brian Warner
  • Re: [curves] PAKE questions Michael Scott
  • Re: [curves] PAKE questions Michael Hamburg
  • Re: [curves] PAKE questions Brian Warner
  • Re: [curves] PAKE questions Michael Hamburg
  • Re: [curves] PAKE questions Mike Hamburg
  • Re: [curves] PAKE questions Robert Ransom
  • Re: [curves] PAKE questions Trevor Perrin
  • Re: [curves] PAKE questions Trevor Perrin
  • Re: [curves] PAKE questions Mike Hamburg
• [curves] Decaf: simple ECC for groups of prime order p Michael Hamburg
• [curves] Curves and code for Identity-based Encryption Trevor Perrin
  • Re: [curves] Curves and code for Identity-based Encryption Watson Ladd
  • Re: [curves] Curves and code for Identity-based Encryption Filipe
  • Re: [curves] Curves and code for Identity-based Encryption Michael Hamburg
  • Re: [curves] Curves and code for Identity-based Encryption Diego Aranha
• [curves] Seeking a code review Ron Garret
  • Re: [curves] Seeking a code review Frithjof Schulze
• [curves] Unifying public key formats Trevor Perrin
  • Re: [curves] Unifying public key formats Paul Lambert
  • Re: [curves] Unifying public key formats Trevor Perrin
  • Re: [curves] Unifying public key formats Trevor Perrin
  • Re: [curves] Unifying public key formats Robert Ransom
  • Re: [curves] Unifying public key formats Trevor Perrin
  • Re: [curves] Unifying public key formats Paul Lambert
  • Re: [curves] Unifying public key formats Trevor Perrin
  • Re: [curves] Unifying public key formats Paul Lambert
  • Re: [curves] Unifying public key formats Robert Ransom
  • Re: [curves] Unifying public key formats Robert Ransom
  • Re: [curves] Unifying public key formats Trevor Perrin
• [curves] Balancing reduced-radix and full-radix performance for extra-strength primes Trevor Perrin
  • Re: [curves] Balancing reduced-radix and full-radix performance for extra-strength primes Michael Hamburg
  • Re: [curves] Balancing reduced-radix and full-radix performance for extra-strength primes Michael Hamburg
  • Re: [curves] Balancing reduced-radix and full-radix performance for extra-strength primes Watson Ladd
  • Re: [curves] Balancing reduced-radix and full-radix performance for extra-strength primes Robert Ransom
  • Re: [curves] Balancing reduced-radix and full-radix performance for extra-strength primes D. J. Bernstein
  • Re: [curves] Balancing reduced-radix and full-radix performance for extra-strength primes Michael Hamburg
  • Re: [curves] Balancing reduced-radix and full-radix performance for extra-strength primes Trevor Perrin
  • Re: [curves] Balancing reduced-radix and full-radix performance for extra-strength primes Mike Hamburg
  • Re: [curves] Balancing reduced-radix and full-radix performance for extra-strength primes Mike Hamburg
  • Re: [curves] Balancing reduced-radix and full-radix performance for extra-strength primes Trevor Perrin
  • Re: [curves] Balancing reduced-radix and full-radix performance for extra-strength primes Mike Hamburg
  • Re: [curves] Balancing reduced-radix and full-radix performance for extra-strength primes Trevor Perrin
  • Re: [curves] Balancing reduced-radix and full-radix performance for extra-strength primes Michael Hamburg
  • Re: [curves] Balancing reduced-radix and full-radix performance for extra-strength primes Watson Ladd
• [curves] NIST Workshop on Elliptic Curve Cryptography Standards Trevor Perrin
• [curves] A-shirt Edwards curve parameters David Gil
• [curves] Costs of cofactor > 1 Trevor Perrin
  • Re: [curves] Costs of cofactor > 1 Michael Hamburg
  • Re: [curves] Costs of cofactor > 1 Robert Ransom
  • Re: [curves] Costs of cofactor > 1 Trevor Perrin
  • Re: [curves] Costs of cofactor > 1 Robert Ransom
• [curves] Independence of SafeCurves conditions [was Re: Twist-secure Weierstrass curves over Fq(Sal384)] David Leon Gil
  • Re: [curves] Independence of SafeCurves conditions [was Re: Twist-secure Weierstrass curves over Fq(Sal384)] Robert Ransom
• [curves] Another try at point compression Mike Hamburg
  • Re: [curves] Another try at point compression Trevor Perrin
  • Re: [curves] Another try at point compression Michael Hamburg
  • Re: [curves] Another try at point compression David Leon Gil
  • Re: [curves] Another try at point compression Michael Hamburg
  • Re: [curves] Another try at point compression Trevor Perrin
  • Re: [curves] Another try at point compression Trevor Perrin
  • Re: [curves] Another try at point compression Samuel Neves
  • Re: [curves] Another try at point compression Robert Ransom
  • Re: [curves] Another try at point compression Michael Hamburg
  • Re: [curves] Another try at point compression Trevor Perrin
  • Re: [curves] Another try at point compression Robert Ransom
  • Re: [curves] Another try at point compression Michael Hamburg
  • Re: [curves] Another try at point compression Robert Ransom
  • Re: [curves] Another try at point compression Michael Hamburg
  • Re: [curves] Another try at point compression Robert Ransom
  • Re: [curves] Another try at point compression Robert Ransom
  • Re: [curves] Another try at point compression Michael Hamburg
  • Re: [curves] Another try at point compression Michael Hamburg
  • Re: [curves] Another try at point compression D. J. Bernstein
  • Re: [curves] Another try at point compression Michael Hamburg
• [curves] Twist-secure Weierstrass curves over Fq(Sal384) David Leon Gil
  • Re: [curves] Twist-secure Weierstrass curves over Fq(Sal384) David Leon Gil
• [curves] CFRG's 25519 proposal Trevor Perrin
  • Re: [curves] CFRG's 25519 proposal David Gil
• [curves] Twist security and induced distributions David Leon Gil
  • Re: [curves] Twist security and induced distributions Steven Galbraith
  • Re: [curves] Twist security and induced distributions David Gil
  • Re: [curves] Twist security and induced distributions Steve Thomas
• [curves] A very simple PAKE Jonathan Cressman
  • Re: [curves] A very simple PAKE Mike Hamburg
  • Re: [curves] A very simple PAKE Jonathan Cressman
  • Re: [curves] A very simple PAKE Michael Hamburg
• [curves] Goldilocks optimizations Trevor Perrin
• [curves] The Pareto frontiers of sleeveless primes David Leon Gil
  • Re: [curves] The Pareto frontiers of sleeveless primes Mike Hamburg
  • Re: [curves] The Pareto frontiers of sleeveless primes Michael Hamburg
  • Re: [curves] The Pareto frontiers of sleeveless primes Ben Harris
  • Re: [curves] The Pareto frontiers of sleeveless primes Ben Harris
  • Re: [curves] The Pareto frontiers of sleeveless primes Ben Harris
  • Re: [curves] The Pareto frontiers of sleeveless primes David Leon Gil
  • Re: [curves] The Pareto frontiers of sleeveless primes Mike Hamburg
  • Re: [curves] The Pareto frontiers of sleeveless primes Ben Harris
  • Re: [curves] The Pareto frontiers of sleeveless primes Samuel Neves
  • Re: [curves] The Pareto frontiers of sleeveless primes David Leon Gil
• [curves] SPAKE2 proof Watson Ladd
  • Re: [curves] SPAKE2 proof Trevor Perrin
• [curves] E-521 Trevor Perrin
  • Re: [curves] E-521 David Leon Gil
  • Re: [curves] E-521 Samuel Neves
  • Re: [curves] E-521 Trevor Perrin
  • Re: [curves] E-521 Michael Hamburg
  • Re: [curves] E-521 Michael Hamburg
  • Re: [curves] E-521 Trevor Perrin
  • Re: [curves] E-521 Michael Hamburg
• [curves] PAKE use cases & requirements Trevor Perrin
  • Re: [curves] PAKE use cases & requirements Paul Lambert
  • Re: [curves] PAKE use cases & requirements Trevor Perrin
  • Re: [curves] PAKE use cases & requirements Paul Lambert
  • Re: [curves] PAKE use cases & requirements Greg Zaverucha
  • Re: [curves] PAKE use cases & requirements Greg Zaverucha
  • Re: [curves] PAKE use cases & requirements Brian Warner
  • Re: [curves] PAKE use cases & requirements Michael Hamburg
  • Re: [curves] PAKE use cases & requirements Feng Hao
  • Re: [curves] PAKE use cases & requirements Michael Hamburg
  • Re: [curves] PAKE use cases & requirements Damien Miller
  • Re: [curves] PAKE use cases & requirements Watson Ladd
  • Re: [curves] PAKE use cases & requirements Damien Miller
  • Re: [curves] PAKE use cases & requirements Watson Ladd
  • Re: [curves] PAKE use cases & requirements Michael Hamburg
• [curves] Ed25519 sigs with Curve25519/X25519 keypairs Trevor Perrin
• [curves] PAKE use cases (was: password authenticated key exchange (PAKE)) Trevor Perrin
  • Re: [curves] PAKE use cases Brian Warner
  • Re: [curves] PAKE use cases Feng Hao
  • Re: [curves] PAKE use cases Trevor Perrin
  • Re: [curves] PAKE use cases Feng Hao
  • Re: [curves] PAKE use cases Trevor Perrin
  • Re: [curves] PAKE use cases Trevor Perrin
• [curves] Gueron/Krasnov P-256 in OpenSSL Trevor Perrin
• [curves] password authenticated key exchange (PAKE) Michael Hamburg
  • Re: [curves] password authenticated key exchange (PAKE) David Leon Gil
  • Re: [curves] password authenticated key exchange (PAKE) Mike Hamburg
• [curves] The SPEKE Protocol Revisited Feng Hao
  • Re: [curves] The SPEKE Protocol Revisited Michael Hamburg
  • Re: [curves] The SPEKE Protocol Revisited Feng Hao
  • Re: [curves] The SPEKE Protocol Revisited Michael Hamburg
  • Re: [curves] The SPEKE Protocol Revisited Daniel Kahn Gillmor
  • Re: [curves] The SPEKE Protocol Revisited Feng Hao
  • Re: [curves] The SPEKE Protocol Revisited Daniel Kahn Gillmor
  • Re: [curves] The SPEKE Protocol Revisited David Leon Gil
• [curves] How close is Mike's Ed448 to being production-ready? Nicholas Wilson
  • Re: [curves] How close is Mike's Ed448 to being production-ready? Michael Hamburg
  • Re: [curves] How close is Mike's Ed448 to being production-ready? Nicholas Wilson
• [curves] Curve25519 naming / renaming Trevor Perrin
  • Re: [curves] Curve25519 naming / renaming Tony Arcieri
  • Re: [curves] Curve25519 naming / renaming Tony Arcieri
  • Re: [curves] Curve25519 naming / renaming CodesInChaos
  • Re: [curves] Curve25519 naming / renaming David Leon Gil
• [curves] ECSRP Steve Thomas
  • Re: [curves] ECSRP Michael Hamburg
  • Re: [curves] ECSRP Steve Thomas
  • Re: [curves] ECSRP Michael Hamburg
• [curves] Handling invalid (unreduced) public keys and signatures in 25519 Trevor Perrin
  • Re: [curves] Handling invalid (unreduced) public keys and signatures in 25519 Trevor Perrin
  • Re: [curves] Handling invalid (unreduced) public keys and signatures in 25519 Robert Ransom
  • Re: [curves] Handling invalid (unreduced) public keys and signatures in 25519 Trevor Perrin
• [curves] Sig nonce generation Michael Hamburg
  • Re: [curves] Sig nonce generation Samuel Neves
  • Re: [curves] Sig nonce generation Trevor Perrin
  • Re: [curves] Sig nonce generation Jon Callas
  • Re: [curves] Sig nonce generation Michael Hamburg
  • Re: [curves] Sig nonce generation Jon Callas
  • Re: [curves] Sig nonce generation Watson Ladd
  • Re: [curves] Sig nonce generation Jon Callas
  • Re: [curves] Sig nonce generation Trevor Perrin
  • Re: [curves] Sig nonce generation Mike Hamburg
• [curves] W3C WebCrypto Trevor Perrin
• [curves] Ed448-Goldilocks (sponges and collision resistance) David Leon Gil
  • Re: [curves] Ed448-Goldilocks (sponges and collision resistance) Michael Hamburg
  • Re: [curves] Ed448-Goldilocks (sponges and collision resistance) Samuel Neves
  • Re: [curves] Ed448-Goldilocks (sponges and collision resistance) David Leon Gil
  • Re: [curves] Ed448-Goldilocks (sponges and collision resistance) David Leon Gil
  • Re: [curves] Ed448-Goldilocks (sponges and collision resistance) Michael Hamburg
• [curves] Ed448-Goldilocks SHAKE David Leon Gil
  • Re: [curves] Ed448-Goldilocks SHAKE Michael Hamburg

• Earlier messages
• Later messages