3 ms·
Are you suggesting they remove all curves that may be tainted and ship without them? Thereby forcing application developers that do want to use them to implemen
by X-Istence 13y ago
Are you suggesting they remove all curves that may be tainted and ship without them? Thereby forcing application developers that do want to use them to implement each and every single one themselves?
- mzs 13y agoI suppose so, but I'd rather people not use anything other than Goldilocks or 41417. I'm hoping that for those applications if they are forced so use something like p=192 they ignore the ECC option entirely, don't code it, and fallback to some interoperable DSA or RSA scheme instead in whatever protocol it may be. Maybe there is some case where that is not possible?
- derefr 13y agoHow about seeming to ship them, but when you try to compile with them, getting an error containing a link to a page that explains why you shouldn't be using them?