Nikos Mavrogiannopoulos <[email protected]> writes:

> Hi,
>  Some comments on the 3.3, plan:
>> +    Add larger "safe" curves, e.g., M-383, curve41417, curve448 and
>> +    E-521.
>
> I think curve448 should be prioritized over anything else since it
> seems to be the only thing being standardized at the moment by CFRG:
> https://tools.ietf.org/html/rfc7748

Makes sense. IIRC, the corresponding Edwards curve for curve448 needs
slightly different equations for scalar multiply with a fixed point.

>> Side-channel silent mem_equalp.
> Do you mean a function with run time independent of its input values?

Exactly. 

> I have such a function at gnutls:
> https://gitlab.com/gnutls/gnutls/blob/master/lib/safe-memfuncs.c#L70

Difficulty is proper naming... Since it doesn't distinguish between lexically 
smaller
and larger like memcmp, I don't think it should be named like *_memcmp.
And we also need a name for the nettle header file.

Regards,
/Niels

-- 
Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26.
Internet email is subject to wholesale government surveillance.
_______________________________________________
nettle-bugs mailing list
[email protected]
http://lists.lysator.liu.se/mailman/listinfo/nettle-bugs

Reply via email to