<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div><span></span></div><div><div>Wait, do you want to hash messages to the curve, or just be able to hash curve points? The former is kind of a niche feature, though you could implement it yourself if the library doesn't support it. <br><br>Sent from my phone. Please excuse brevity and typos.<div><br>On Jun 18, 2015, at 10:38, Frank Wang <<a href="mailto:frankw@mit.edu">frankw@mit.edu</a>> wrote:<br><br></div><blockquote type="cite"><div><div dir="ltr">Hi Thomas,<div><br>Yes. Sorry, my goal right now is that I have a key revocation scheme that I want to implement, involving elliptic curve addition, subtraction, and scalar multiplication (as well as hashing messages to the curve). I would like reasonable performance (so C does seem good) because I'm benchmarking it against AES. However, I'm willing to trade off some performance for ease of use.</div><div><br></div><div>TweetNacl seems to be designed primarily for ECDH and EC signatures rather than a general purpose elliptic curve library. I'm exploring alternatives.</div><div><br></div><div>Frank</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Jun 18, 2015 at 1:34 PM, Thomas DuBuisson <span dir="ltr"><<a href="mailto:thomas.dubuisson@gmail.com" target="_blank">thomas.dubuisson@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Frank,<br> A lot of recommendations are pouring in about C and Java libraries, on<br> top of which I'm tempted to recommend my own in Cryptol or one of the<br> Sage version out there, but none of us have heard about your actual<br> goal and needs. Could you say more about how this code will be used<br> and what you hope to achieve?<br> <span class="HOEnZb"><font color="#888888"><br> Thomas<br> </font></span><span class="im HOEnZb"><br> On Wed, Jun 17, 2015 at 2:16 PM, Frank Wang <<a href="mailto:frankw@mit.edu">frankw@mit.edu</a>> wrote:<br> </span><div class="HOEnZb"><div class="h5">> Hi,<br> ><br> > I am working on a research project at MIT, and I need to use elliptic curves<br> > (or a group where DDH is hard, but elliptic curves seem like the best way to<br> > go) to implement a cryptographic scheme. I've been trying to search for<br> > general Curve25519 and Ed25519 libraries where I can just do add and scalar<br> > multiply as well as hash messages to points. The best library I've come<br> > across so far is tweetnacl, which has the add and scalar multiply operation<br> > for Ed25519, but it's a bit difficult to use, and I end up modifying the<br> > library to do subtraction of points.<br> ><br> > I have yet to find a good library that allows me to just do operations on<br> > Ed25519 or Curve25519. Does such a library exist? If not, any tips on what I<br> > should do? Should I just use another curve library that is better supported?<br> > If so, any suggestions?<br> ><br> > Thanks,<br> > Frank<br> ><br> </div></div><div class="HOEnZb"><div class="h5">> _______________________________________________<br> > Curves mailing list<br> > <a href="mailto:Curves@moderncrypto.org">Curves@moderncrypto.org</a><br> > <a href="https://moderncrypto.org/mailman/listinfo/curves" rel="noreferrer" target="_blank">https://moderncrypto.org/mailman/listinfo/curves</a><br> ><br> </div></div></blockquote></div><br></div> </div></blockquote><blockquote type="cite"><div><span>_______________________________________________</span><br><span>Curves mailing list</span><br><span><a href="mailto:Curves@moderncrypto.org">Curves@moderncrypto.org</a></span><br><span><a href="https://moderncrypto.org/mailman/listinfo/curves">https://moderncrypto.org/mailman/listinfo/curves</a></span><br></div></blockquote></div></div></body></html>