New algorithm shakes up cryptography

Re:New algorithm shakes up cryptography by djmdjm on Saturday May 17, 2014 @03:07AM (#7759465)

I haven't heard anyone recommending against the GF2m curve fields recommended by the IETF and NIST standards.

Take this with an appropriately large grain of salt - I haven't followed the fallout of Joux' work very closely (because I don't use anything that uses GF2m fields).

[ Parent | on HN ]

Re:New algorithm shakes up cryptography by SaveTheRbtz on Saturday May 17, 2014 @05:25AM (#7759683)

DJB says following about all non-prime fields [1]:

  > Is ECDLP broken for non-prime fields?

  No. However, the security story for non-prime fields 
  (e.g., binary extension fields) is more complicated and 
  less stable than the security story for prime fields, as 
  illustrated by 1998 Frey, 2002 Gaudry–Hess–Smart, 2009 
  Gaudry, and 2012 Petit–Quisquater.

  2006 Bernstein stated that prime fields "have the virtue 
  of minimizing the number of security concerns for 
  elliptic-curve cryptography". Similarly, the Brainpool 
  standard and NSA's Suite B standards require prime fields.
  There is general agreement that prime fields are the safe,
  conservative choice for ECC.

[1] http://safecurves.cr.yp.to/field.html

[ Parent | on HN ]