Re: [curves] qDSA signatures

2017-06-08 Thread Joost Renes
Hi Mike, Thanks for having a look, and for your questions. > This is cool work! I like that you did hyperelliptic Kummer surfaces too. Thanks! > Do you run into any problems where x:z = 0:0 in any of the formulas? That > would make Check always return true, but maybe it can’t happen?

[curves] qDSA signatures

2017-06-06 Thread Joost Renes
Hi all, Yesterday Ben Smith and I have published a draft of our recent research on an x-only signature scheme, which we named qDSA (short for quotient Digital Signature Algorithm). It can be found here: http://eprint.iacr.org/2017/518.pdf, with accompanying code at http://www.cs.ru.nl/~jrenes/.

Re: [curves] Prime order curves vs Decaf

2017-06-01 Thread Joost Renes
On 01/06/17 05:27, Tony Arcieri wrote: > During the recent standardization effort for next-gen TLS curves (i.e. > through the CFRG), there was a big push for Edwards curves. But around > the same time there were several papers on complete formulas for > Weierstrass curves: > >