These are curves not algorithms. I wouldn't recommend secp256k1 - its
patented, see

http://www.freepatentsonline.com/7110538.html
http://www.freepatentsonline.com/7995752.html

This curve supports an endomorphism, which means it can be computed on
somewhat faster, although its cryptographic strength suffers a little as
well.

There is little to recommend the brainpool curves - they are based on the
superstition that random primes are better. If you want new improved curves
look at more recent literature, for example

http://safecurves.cr.yp.to/

or

http://eprint.iacr.org/2014/130


Mike

On Fri, Dec 19, 2014 at 6:42 AM, Anders Rundgren <
[email protected]> wrote:
>
> Somewhat related to my "WebCrypto/JOSE Algorithm IDs = Mess" posting
> I wonder how you are supposed to for example deal with "brainpool"
> algorithms
> which are more or less an EU standard?
>
> The bitcoin folks apparently use yet another EC algorithm ("secp256k1" in
> JCE).
>
> Anders
>
> _______________________________________________
> jose mailing list
> [email protected]
> https://www.ietf.org/mailman/listinfo/jose
>
_______________________________________________
jose mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/jose

Reply via email to