News for hackers. Stuff that matters.
Re:Proposal to Change the Default TLS Ciphersuites Offered b... by cryptbe on Sunday September 08, 2013 @05:43PM (#6350494)
No, I didn't say that everyone generates their own curves. I meant the security community should generate our own curves. Somebody should email Thomas Pornin.
Re:Proposal to Change the Default TLS Ciphersuites Offered b... by pbsd on Sunday September 08, 2013 @06:12PM (#6350627)
There are already several alternative curve sets, satisfying various degrees of paranoia:

- http://certivox.org/display/EXT/CertiVox+Standard+Curves

- http://tools.ietf.org/html/rfc5639

- curve25519 and the other djb et al curves.

Re:Proposal to Change the Default TLS Ciphersuites Offered b... by tptacek on Sunday September 08, 2013 @05:53PM (#6350527)
Sorry, I didn't mean to imply you were saying that.