[curves] E-521

[Trevor Perrin]

On Mon, Oct 27, 2014 at 4:42 PM, Michael Hamburg <mike at shiftleft.org> wrote:
> I just checked in a (still experimental!) mod to the Goldilocks code which enables p521.  Compile with:
[...]
>         ecdh: 803kcy

Cool, added:

https://docs.google.com/a/trevp.net/spreadsheet/ccc?key=0Aiexaz_YjIpddFJuWlNZaDBvVTRFSjVYZDdjakxoRkE&usp=sharing#gid=0


I know you ruled out Ed480-Ridinghood for performance on 32-bit
systems (I guess 8x60-bit limbs works on 64-bit, but 16x30 isn't
enough headroom on 32-bit?)

How do you expect E-521 to perform on 32-bit? (18x29?)

Trevor