News for hackers. Stuff that matters.

A comment on We Don't Generate Elliptic Curves Every Day. Parent comment

Re:We Don't Generate Elliptic Curves Every Day by tptacek on Tuesday October 24, 2023 @04:38PM (#38005196)
I agree with you, and am reassured by cryptosystems that use 25519 and put on edge by those that use the P-curves (not because of backdoor conspiracy theories, which are silly, but because the P-curves are easy to mess up). But cryptography engineers increasingly disagree with me.
[ Parent | on HN ]
Re:We Don't Generate Elliptic Curves Every Day by tptacek on Wednesday October 25, 2023 @05:15PM (#38018497)
(oh, also: yes, that's my understanding too, that you're still stuck validating incoming curve points in ECDH, but I think the anti-cofactor people have a corresponding argument for signature schemes.)
[ Parent | on HN ]
Re:We Don't Generate Elliptic Curves Every Day by nmadden on Thursday October 26, 2023 @10:11AM (#38025834)
Yeah, and that’s totally reasonable. I’m one of those people that thinks signatures should be used for software updates and nothing else though.
[ Parent | on HN ]
Re:We Don't Generate Elliptic Curves Every Day by tptacek on Thursday October 26, 2023 @11:29AM (#38026878)
Yes, my brain sort of shuts off and buckets signature cryptography into cryptocurrency, which is where the cofactor issues crop up anyways.
[ Parent | on HN ]