Hi Rene, Thanks for addressing the comments. I wasn't looking for exact computational cost comparisons and rather some hints on what to expect if I re-use the underlying implementation of a different curve. Your statement "the overall cost differential is somewhere in the interval [1.00 - 1.25]" is useful (and perhaps sufficient).
I had one remaining suggestion. RFC 7942 (https://tools.ietf.org/html/rfc7942) describes how to improve awareness of running code. Perhaps you could add a section on implementations of Wei25519: https://github.com/ncme/c25519 and that tinydtls https://github.com/ncme/tinydtls now supports Wei25519. --Mohit On 5/15/19 10:21 PM, Rene Struik wrote: Dear colleagues: I slightly updated the draft to address Mohit Sethi's comment [1] on trade-offs between code reuse and computational efficiency. To this end, I added a little section (now Section 6) on "implementation considerations" - see[2]. As already suggested in [3], I did not give an explicit computational cost comparison, since this is highly device and application dependent and alone would not do justice other considerations that come into play when deciding on a crypto implementation strategy. Best regards, Rene [1]https://mailarchive.ietf.org/arch/msg/lwip/DQ5oYwFusICBx_llv1Wenc1EZCQ [2] https://tools.ietf.org/html/draft-ietf-lwig-curve-representations-05#section-6 [3] https://mailarchive.ietf.org/arch/msg/lwip/vSnhe1lO03AfLONxHGmixuP4z64 On 5/15/2019 3:04 PM, [email protected]<mailto:[email protected]> wrote: A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Light-Weight Implementation Guidance WG of the IETF. Title : Alternative Elliptic Curve Representations Author : Rene Struik Filename : draft-ietf-lwig-curve-representations-05.txt Pages : 62 Date : 2019-05-15 Abstract: This document specifies how to represent Montgomery curves and (twisted) Edwards curves as curves in short-Weierstrass form and illustrates how this can be used to carry out elliptic curve computations using existing implementations of, e.g., ECDSA and ECDH using NIST prime curves. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-lwig-curve-representations/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-lwig-curve-representations-05 https://datatracker.ietf.org/doc/html/draft-ietf-lwig-curve-representations-05 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-lwig-curve-representations-05 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ _______________________________________________ Lwip mailing list [email protected]<mailto:[email protected]> https://www.ietf.org/mailman/listinfo/lwip -- email: [email protected]<mailto:[email protected]> | Skype: rstruik cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 _______________________________________________ Lwip mailing list [email protected]<mailto:[email protected]> https://www.ietf.org/mailman/listinfo/lwip
_______________________________________________ Lwip mailing list [email protected] https://www.ietf.org/mailman/listinfo/lwip
