<div>On Tuesday, August 26, 2014, Trevor Perrin <<a href="mailto:trevp@trevp.net">trevp@trevp.net</a>> wrote:<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<br>Dealing with an "X25519" function that is the same as the old<br>"Curve25519", but not necessarily compatible with uses of the new<br>"Curve25519", seems unnecessarily confusing.<br><br>So while clarifying the names here is a great idea, it seems better<br>
not to change the name from its most common use.<br></blockquote></div><div><br></div>(Very much agree; the situation seems to be even worse for "P-25519", Ed25519, Ed25519-SHA2, and EdDSA, which no one seems to understand the difference between.)<div>
<br></div><div>Microsoft's naming convention actually makes some sense; they've named the curves by the *least* common isomorphic form. But I'd kind of like to see new curve names incorporate more information about the *curve*, rather than just prime field and form. (Perhaps encoding that some parameter is minimal, for rigid curves?)</div>
<div><br></div>- David