3 ms·
Sigh, yet another attempt at solving the wrong problem. There is no shortage of proposals for how to generate curves. There is a shortage of implementations th
by red_admiral 11y ago
Sigh, yet another attempt at solving the wrong problem.
There is no shortage of proposals for how to generate curves. There is a shortage of implementations that you can just "npm install" or whatever and use.
For ECC, I can name you one library that people like me can use - libsodium based on djb's Curve/Ed25519. It got into the TLS standard not because it's so much better than anything else but because it has an implementation that works, is available for many languages and has decent documentation.
Of course it's helpful that djb spent a lot of time securing the thing against side-channel/timing attacks and employed the best coding practices and writing and presenting papers on the thing but no amount of writing papers is a substitute for sitting down and actually building the thing in a "production quality" way.