3 ms·
A lot of research went in to Curve25519; multiple decades of ECC academic investigation created a set of criteria for safety: See https://safecurves.cr.yp.to/
by tatersolid 6y ago
A lot of research went in to Curve25519; multiple decades of ECC academic investigation created a set of criteria for safety:
See https://safecurves.cr.yp.to/ https://safecurves.cr.yp.to/
- upofadown 6y agoCurve25519 has only been around for something like 10 years. A catastrophic attack on it would presumably involve new ideas specific to that particular or class of curves. Otherwise any completely new system would have to be considered secure, as it would not suffer from any of the issues of any of the older systems. My understanding is that new elliptic curves can have entirely new characteristics not shared by older curves.
- tatersolid 6y agoCurve25519 was introduced in 2005 and seems to have had rapid uptake in academia due to the reputation of one of the authors (djb). So Curve25519 has had 16 years of widespread academic scrutiny. That’s “battle-tested” by modern cryptographic standards.