3 ms·

There is a menu of ECC algorithms out there. We have seen some of them were backdoored, and there are probably more of those. If you aren’t sure which ones are

by aborsy 5y ago

There is a menu of ECC algorithms out there. We have seen some of them were backdoored, and there are probably more of those. If you aren’t sure which ones are safe, it might be better to use RSA from a standard source (OpenSSL, PGP, SSH etc). Users don’t implement algorithms, and don’t cares if they are hard to program.

hinkley 5y ago
Let this be a lesson to whoever comes next: cute and distinct names for your cryptographic algorithm make it easy to distance yourself from people who create similar algorithms that turn out not to be secure. RSA is fundamentally a trick of modular arithmetic, but it's not called that, so if someone else fucks up their modular arithmetic, it doesn't immediately bring shame and doubt upon RSA. Meanwhile the ECC community is using an algorithm that is basically 'Curve' plus a five digit number. If this name isn't already being openly mocked, it will be at some point in the future. Normal people don't have lists of 'good' and 'bad' numbers in their heads. If Curve#### is found to be bad, then they'll think Curve##### is the one everyone is talking about.