4 ms·
You know who wouldn't agree that Curve25519 is "just a specific set of constants for ECDH"? The guy who wrote SafeCurves. Also: you've lapsed into talking down
by tptacek 2mo ago
You know who wouldn't agree that Curve25519 is "just a specific set of constants for ECDH"? The guy who wrote SafeCurves. Also: you've lapsed into talking down all lattices, which leaves you in the position of explaining why Bernstein submitted/sponsored sntrup.
- vlovich123 2mo agoAll I’m saying is that lattices are newer and more complex. Bernstein is proposing a lattice scheme AND saying it should be hybrid. ALSO. The proposal is to replace cyclotomics with Gallois field precisely because they are better understood and easier to construct correctly. > The NTRU Prime project recommends switching from "cyclotomics" to "large Galois groups" to reduce the attack surface in lattice-based cryptography. After this recommendation was published, Gentry's original (STOC 2009) fully homomorphic encryption system was shown to be broken in quantum polynomial time for cyclotomics.
- deleted 2mo ago[deleted]