3 ms·
But nobody uses the Brainpool curves for TLS. Everyone uses NIST P-256 and P-384, and everyone will move to Curve25519 "real soon now". key exchange: https://
by wolf550e 11y ago
But nobody uses the Brainpool curves for TLS. Everyone uses NIST P-256 and P-384, and everyone will move to Curve25519 "real soon now".
key exchange:
https://tools.ietf.org/html/draft-irtf-cfrg-curves-09 https://tools.ietf.org/html/draft-irtf-cfrg-curves-09
signatures:
https://www.ietf.org/mail-archive/web/cfrg/current/msg07364.html https://www.ietf.org/mail-archive/web/cfrg/current/msg07364....
- brohee 11y agoSomeone actively avoiding the NIST curves might use them, but it looks more and more like chosing between Scylla and Charybdis.
- wolf550e 11y agoLooks like Brainpool curves are not supported by NSS, SChannel or SecureTransport, so they're useless for TLS when the client is a browser. If the client is something that uses openssl, you can use them. https://en.wikipedia.org/wiki/Comparison_of_TLS_implementations#Supported_elliptic_curves https://en.wikipedia.org/wiki/Comparison_of_TLS_implementati...