News for hackers. Stuff that matters.
Re:Proposal to Change the Default TLS Ciphersuites Offered b... by tptacek on Sunday September 08, 2013 @02:24PM (#6349656)
The standard provides a standard set of curve parameters and a NIST-sanctioned way of generating new curve parameters using the exact same method.
Re:Proposal to Change the Default TLS Ciphersuites Offered b... by acqq on Sunday September 08, 2013 @02:51PM (#6349778)
How can be any other parameters than the standard ones used in the current browsers and servers? I think they can't, am I right?

And how can browsers start to use any other parameters before they standardise them? I think they can't?

Re:Proposal to Change the Default TLS Ciphersuites Offered b... by tptacek on Sunday September 08, 2013 @02:59PM (#6349820)
This is true but not particularly meaningful to me, because you can't really do anything new with crypto at all without some kind of software update. For instance, the primes and generator for conventional number theoretic DH are also pre-generated and baked into a standard.