[curves] The great debate over point formats (Mike Hamburg)

[Watson Ladd]

I don't know that isogeny to a short Weierstrass curve actually solves
anything, unless we transmit the points in that manner.
But then a lot of the security gains vanish: we need to validate
points, formulas get slow, etc.
Sincerely,
Watson

On Sat, Feb 1, 2014 at 4:36 PM, Paulo S. L. M. Barreto
<pbarreto at larc.usp.br> wrote:
> How about x^2 + y^2 = 1 + 3435*x^2*y^2 (or an isogenous curve, (-1)-twist,
> etc) over the NIST prime p_384 := 2^384 - 2^128 - 2^96 + 2^32 - 1?
>
> Cheers,
>
> Paulo.
>
>
> _______________________________________________
> Curves mailing list
> Curves at moderncrypto.org
> https://moderncrypto.org/mailman/listinfo/curves



-- 
"Those who would give up Essential Liberty to purchase a little
Temporary Safety deserve neither  Liberty nor Safety."
-- Benjamin Franklin