4 ms·
If someone suddenly breaks the stuff based on the 25519 curve there are going to be a lot of very unhappy people. I am still waiting for an explanation of why t
by upofadown 6y ago
If someone suddenly breaks the stuff based on the 25519 curve there are going to be a lot of very unhappy people. I am still waiting for an explanation of why this particular curve is immune to such a breakthrough.
- tatersolid 6y agoA lot of research went in to Curve25519; multiple decades of ECC academic investigation created a set of criteria for safety: See https://safecurves.cr.yp.to/ https://safecurves.cr.yp.to/
- upofadown 6y agoCurve25519 has only been around for something like 10 years. A catastrophic attack on it would presumably involve new ideas specific to that particular or class of curves. Otherwise any completely new system would have to be considered secure, as it would not suffer from any of the issues of any of the older systems. My understanding is that new elliptic curves can have entirely new characteristics not shared by older curves.
- tatersolid 6y agoCurve25519 was introduced in 2005 and seems to have had rapid uptake in academia due to the reputation of one of the authors (djb). So Curve25519 has had 16 years of widespread academic scrutiny. That’s “battle-tested” by modern cryptographic standards.
- tptacek 6y agoNobody thinks it is. Curve25519 being invincible is not the premise behind the shift away from "agility".