3 ms·
As someone who is an amateur at cryptography, are you being earnest or facetious about the terrifying nature of ECDSA?
by linkregister 10y ago
As someone who is an amateur at cryptography, are you being earnest or facetious about the terrifying nature of ECDSA?
- tptacek 10y agoBoth ECDSA and the P- curves are terrifying. Not because NIST backdoored either of them, but because they're both comically easy to fuck up. They are last-generation legacy elliptic curve operations. Cryptographers have moved on to significantly better, safer designs. It's 2016 and the vanguard of cryptographic modernity in DNSSEC is P-curve ECDSA --- if you use it, you're taking a risk that some deployed resolvers won't understand your zones. The breaking-change new crypto in DNSSEC is already obsolete.