@aantonop @jgarzik @ivanristic @matthew_d_green A Koblitz curve?? Oh my...
-
-
Replying to @pbarreto
@aantonop@jgarzik@ivanristic@matthew_d_green Not the "7" coefficient: the very curve itself. Anomalous curves have a dark history.1 reply 1 retweet 1 like -
Replying to @pbarreto
@pbarreto@jgarzik@ivanristic@matthew_d_green Is a Koblitz curve "anomalous"? Is there any evidence of weakness for Koblitz curves?1 reply 1 retweet 0 likes -
Replying to @aantonop
@aantonop@jgarzik@ivanristic@matthew_d_green Lookup the "SmartASS" attack. But there's something strange, that curve is not K-283...2 replies 1 retweet 1 like -
Replying to @matthew_d_green
@matthew_d_green@pbarreto@aantonop@jgarzik@ivanristic Correct. Koblitz curves are "binary anomalous curves", which is not the same.2 replies 0 retweets 0 likes -
Replying to @sevenps
@matthew_d_green@pbarreto@aantonop@jgarzik@ivanristic secp256k1 is not binary, so it's not Koblitz, but has a similar endomorphism.3 replies 0 retweets 0 likes -
Replying to @sevenps @matthew_d_green and
Sorry for necroposring. But is koblitz or not? Use frobenius map formulas or not :) ?
1 reply 0 retweets 0 likes -
Not a Koblitz curve (despite the odd SECG naming convention) in the sense of not being a binary anomalous curve. The sextic twists have quite smooth orders, though (I believe I tweeted on this too at the time).
1 reply 0 retweets 1 like -
Thx. But any frobenius map optimization is used for ecdsa or not?
1 reply 0 retweets 0 likes
You can use the GLV endomorphism like libsecp256k1 optionally does.
-
-
Replying to @BRIAN_____ @pbarreto and
thanks. Any link? And do you know what bitcoin does by default?
1 reply 0 retweets 1 like -
Replying to @asanso @BRIAN_____ and
and what about this endomorphism https://bitcointalk.org/index.php?topic=3238.msg45565#msg45565 …?
0 replies 0 retweets 0 likes
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.