4 ms·
If anyone wonders about the potential practical impact of the subversion of the Brainpool curves, it's pretty bad, as the curves have been standardized for use
by brohee 11y ago
If anyone wonders about the potential practical impact of the subversion of the Brainpool curves, it's pretty bad, as the curves have been standardized for use in TLS by RFC 7027.
Any other standard using Brainpool curves?
- wolf550e 11y agoBut nobody uses the Brainpool curves for TLS. Everyone uses NIST P-256 and P-384, and everyone will move to Curve25519 "real soon now". key exchange: https://tools.ietf.org/html/draft-irtf-cfrg-curves-09 https://tools.ietf.org/html/draft-irtf-cfrg-curves-09 signatures: https://www.ietf.org/mail-archive/web/cfrg/current/msg07364.html https://www.ietf.org/mail-archive/web/cfrg/current/msg07364....
- brohee 11y agoSomeone actively avoiding the NIST curves might use them, but it looks more and more like chosing between Scylla and Charybdis.
- wolf550e 11y agoLooks like Brainpool curves are not supported by NSS, SChannel or SecureTransport, so they're useless for TLS when the client is a browser. If the client is something that uses openssl, you can use them. https://en.wikipedia.org/wiki/Comparison_of_TLS_implementations#Supported_elliptic_curves https://en.wikipedia.org/wiki/Comparison_of_TLS_implementati...