Hi Aaron,
> That's true. I've mixed up these two SEC2 curves in my mind. A part of my claim may be misunderstood as Yaron pointed out. TLS-BCP does not recommend ECDSA. However, I think that it does not have an impact on your agreement because ECDSA based on the same as curves of ECDH is used in TLS and a lot of TLS protocols use secp256r1 (, secp384r1, and secp521r1) as far as I checked it. Best, Kohei KASAMATSU (2014/08/06 5:38), Aaron Zauner wrote: > Hi Kohei, > > Kohei Kasamatsu wrote: >> I do not know a lot about cache-timing attacks, but I think that a >> setting of the paper by Naomi Benger et al. is different from TLS-BCP >> draft. (the paper: secp256k1, TLS-BCP: brainpoolp256r1, secp256r1) >> >> What do you think about it? >> > That's true. I've mixed up these two SEC2 curves in my mind. > > Aaron > > > > > _______________________________________________ > Uta mailing list > [email protected] > https://www.ietf.org/mailman/listinfo/uta > _______________________________________________ Uta mailing list [email protected] https://www.ietf.org/mailman/listinfo/uta
