<html><head><style>body{font-family:Helvetica,Arial;font-size:13px}</style></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;">1. CryptoExperts is like a European version of Cryptography Research; it’s people from Gemalto, INRIA, Antoine Joux, Lous Goubin, their grad students, &c. They’re not randos.</div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;"><br></div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;">2. Their paper doesn’t claim anything is wrong with 25519. They’re just proposing a random Edwards curve alternative to 25519, with a cute trick to generate credible random parameters. Their paper rejects the Brainpool-y parameters-from-math-constants approach, citing Bernstein’s BADA55 argument, in favor of pure random parameters. </div><br> <div id="bloop_sign_1456338134508743168" class="bloop_sign"><div style="font-family:helvetica,arial;font-size:13px">-- <br>Thomas Ptacek<br><br></div></div><p class="airmail_on">On February 24, 2016 at 12:20:05 PM, Salz, Rich (<a href="mailto:rsalz@akamai.com">rsalz@akamai.com</a>) wrote:</p> <blockquote type="cite" class="clean_bq"><span><div><div></div><div>
<br>
<br>> > http://cryptoexperts.github.io/million-dollar-curve/
<br>
<br>Who are these folks? What is wrong with25519 and/or 448?
<br>
<br>My answers: I don't know and nothing.
<br>
<br>So why do I want this?
<br>
<br>_______________________________________________
<br>Curves mailing list
<br>Curves@moderncrypto.org
<br>https://moderncrypto.org/mailman/listinfo/curves
<br></div></div></span></blockquote></body></html>