'tptacek commented 17 days ago about EC crypto (https://news.ycombinator.com/item?id=6608163 https://news.ycombinator.com/item?id=6608163): You should never, e

'tptacek commented 17 days ago about EC crypto (https://news.ycombinator.com/item?id=6608163 https://news.ycombinator.com/item?id=6608163): You should never, ever, never, nevern, nervenvarn build your own production ECC code. ECC is particularly tricky to get right. But if you want to play with the concepts, a great place to start is the Explicit Formulas Database at http://www.hyperelliptic.org/EFD/ http://www.hyperelliptic.org/EFD/ ; the fast routines for point multiplication are mercifully complicated, so copying them from the EFD is a fine way to start, instead of working them out from first principles. He went on to say that only Adam Langley or Daniel Bernstein should be implementing ECC. Probably because there are so many ways to slip up; few others would have the experience necessary to avoid all the pitfalls. 'theboss agreed: I've implemented ECC and you are 100% correct. Nobody should implement ECC unless you really really know what you're doing. Mapping points to the curve, multiplying points, point addition, there is too much math stuff to mess up on. Just don't do it. If you read one thing tptacek says, read the last paragraph.