On Nov 4, 2015 11:54 PM, "Trevor Perrin" <<a href="mailto:trevp@trevp.net">trevp@trevp.net</a>> wrote: > > Okay good to know about the speed trade-off. Right now I'm doing a sort of > > awkward dance of having "Curve25519 + Blake2b", which is a bit incoherent. > > The larger hash is more conservative. It's even more overkill, but > there's nothing wrong with that, if it doesn't cost you anything. The concern is just -- what's the point in having a strong hash when I'm using a weaker curve? Seems like 448 would make more sense if I'm going to stick with blake2b. At the moment, the thing making me hold onto 25519 is that the public keys are so short they can be passed around as command line arguments, which is nice for usability, and the fact that curve25519-donna has been decently battle tested.