On Fri, Nov 04, 2011 at 01:01:09PM +0000, Robert Ransom wrote: > I have also seen parameters for an Edwards curve equivalent to > Curve25519; we will need the Edwards-curve parameters in order to > implement point addition efficiently in constant time for our EC > signature scheme.
Hmm? curve25519 _is_ an Edwards curve (that's why it has that slightly annoying non-prime order), and djb's implementation, at least, is supposed to be constant-time. - Ian _______________________________________________ tor-dev mailing list [email protected] https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev
