3 ms·
> Until then, stamps [REJECTED] on the DNSSEC folder death to 90's crypto If you read TFA you would see that we are transitioning to P-256. FWIW, ECC crypto i
by indolering 11y ago
> Until then, stamps [REJECTED] on the DNSSEC folder death to 90's crypto
If you read TFA you would see that we are transitioning to P-256. FWIW, ECC crypto is really slow and we will need to transition to post-quantum crypto in another 10 or 15 years.
- sarciszewski 11y agoI did the article. ECC crypto can mean ECDSA which is also flawed 90's crypto. I specifically demanded EdDSA which can more easily be implemented in a high speed and constant time. I'm sorry you're so laser focused on your own writing, but the DNSSEC debate is bigger than you.
- tptacek 11y ago"ECC crypto is really slow"? Please explain what you mean by that.
- indolering 11y agoECC signature verification is slower and big resolvers are complaining about it. Ed25519 is faster than the equivalent P curve but it's still slower than log-based crypto.
- tptacek 11y agoThe alternative in DNSSEC to ECDSA isn't "log based crypto".