3 ms·

Would you support an effort to get Ed25519/Curve25519 incorporated into NSS and OpenSSL? :)

tptacek 12y ago
What does that even mean? Are Ed25519 and Curve25519 superior to ECDSA and NIST P-256? Of course. What would it mean to "support" or "not support" it?
- tedunangst 12y ago
  You have to say "I think OpenSSL should support Ed25519" and then you support it. Until you say the magic words, you don't support it.
  - sarciszewski 12y ago
    That's not at all what I meant by "support".
- sarciszewski 12y ago
  Support an effort -- Volunteer time/resources to make it happen.
  - tptacek 12y ago
    It's not about the code. You need to get Mozilla and Google to agree to deploy. They aren't dragging their feet; they put an enormous amount of effort into these problems, and employ some of the best in the industry.
    - sarciszewski 12y ago
      Okay. I wish there was more visibility on these matters. I'm still, by and large, an outsider to all the going ons of the industry. :)
      - tptacek 12y ago
        That's not fair either. Most of this stuff is happening in the open; you just have to put the effort in to joining the mailing lists, reading the bug trackers, &c.
        sarciszewski 12y ago
        Thomas, you basically just told me, "That's not fair either. Most of this stuff is happening in the open; you just have to know the obscure places to look." Visibility isn't a matter of "can the public see it?" I also mean "is it in a place the public is likely to look?"
        tptacek 12y ago
        Nobody is hiding it. People who are competent in the subject matter can find it easily if they want to. I think, respectfully, that you might just not want to be wrong about this. :)
        sarciszewski 12y ago
        I was moreso trying to express a desire for better PR than criticizing the transparency of their efforts. I'll hunt down these elusive mailing lists and bug trackers and see if I can cobble together a TL;DR portal :) Sorry if there was a miscommunication ;)

What does that even mean? Are Ed25519 and Curve25519 superior to ECDSA and NIST P-256? Of course. What would it mean to "support" or "not support" it?

tedunangst 12y ago
You have to say "I think OpenSSL should support Ed25519" and then you support it. Until you say the magic words, you don't support it.
- sarciszewski 12y ago
  That's not at all what I meant by "support".
sarciszewski 12y ago
Support an effort -- Volunteer time/resources to make it happen.
- tptacek 12y ago
  It's not about the code. You need to get Mozilla and Google to agree to deploy. They aren't dragging their feet; they put an enormous amount of effort into these problems, and employ some of the best in the industry.
  - sarciszewski 12y ago
    Okay. I wish there was more visibility on these matters. I'm still, by and large, an outsider to all the going ons of the industry. :)
    - tptacek 12y ago
      That's not fair either. Most of this stuff is happening in the open; you just have to put the effort in to joining the mailing lists, reading the bug trackers, &c.
      - sarciszewski 12y ago
        Thomas, you basically just told me, "That's not fair either. Most of this stuff is happening in the open; you just have to know the obscure places to look." Visibility isn't a matter of "can the public see it?" I also mean "is it in a place the public is likely to look?"
        tptacek 12y ago
        Nobody is hiding it. People who are competent in the subject matter can find it easily if they want to. I think, respectfully, that you might just not want to be wrong about this. :)
        sarciszewski 12y ago
        I was moreso trying to express a desire for better PR than criticizing the transparency of their efforts. I'll hunt down these elusive mailing lists and bug trackers and see if I can cobble together a TL;DR portal :) Sorry if there was a miscommunication ;)