4 ms·
NIST or DJB. It's safer to ignore NIST and do what DJB says.
by slim 5y ago
NIST or DJB. It's safer to ignore NIST and do what DJB says.
- nullc 5y agoMakes NIST's responses towards DJB in the PQ crypto process have been ... interesting. https://groups.google.com/a/list.nist.gov/g/pqc-forum/c/3mVeyEfYnUY/m/_xYg6HRcDQAJ https://groups.google.com/a/list.nist.gov/g/pqc-forum/c/3mVe...
- slim 5y agoIt's even more interesting that DJB did not care to answer
- nullc 5y agoHe had answered, in advance-- in the form of a formal complaint because the substance of NIST's message (the complaint that DJB had hung a carrot of 'attacks' in front of them in private but hadn't delivered a publication 'on time') had been previously stated by one of their staff. He published the formal complaint today: https://groups.google.com/a/list.nist.gov/g/pqc-forum/c/4baO2sC9dLA/m/PRlPLUL1BgAJ https://groups.google.com/a/list.nist.gov/g/pqc-forum/c/4baO...
- jart 5y agoWell that's what most open source does today. GitHub posted a blog post four days ago that the majority of SSH clients have moved away from aes to chacha. https://github.blog/2021-09-01-improving-git-protocol-security-github/ https://github.blog/2021-09-01-improving-git-protocol-securi... I wouldn't be surprised if the majority of https traffic uses x25519 these days instead of rsa or ℘256. djb is an influential guy.