[curves] The great debate over point formats (Mike Hamburg)
watsonbladd at gmail.com
Sat Feb 1 16:38:50 PST 2014
I don't know that isogeny to a short Weierstrass curve actually solves
anything, unless we transmit the points in that manner.
But then a lot of the security gains vanish: we need to validate
points, formulas get slow, etc.
On Sat, Feb 1, 2014 at 4:36 PM, Paulo S. L. M. Barreto
<pbarreto at larc.usp.br> wrote:
> How about x^2 + y^2 = 1 + 3435*x^2*y^2 (or an isogenous curve, (-1)-twist,
> etc) over the NIST prime p_384 := 2^384 - 2^128 - 2^96 + 2^32 - 1?
> Curves mailing list
> Curves at moderncrypto.org
"Those who would give up Essential Liberty to purchase a little
Temporary Safety deserve neither Liberty nor Safety."
-- Benjamin Franklin
More information about the Curves