@bascule @matthew_d_green @JacksDismay Not so. That curve is birationally equivalent to Curve25519. It's the same curve in disguise.
@pbarreto @matthew_d_green @JacksDismay you could reimplement Curve25519 in terms of Ed25519 to get the perf benefits but why bother?
-
-
@bascule@pbarreto@matthew_d_green@JacksDismay DH wants Montgomery repres, sign wants Edwards; fixed basepoint scalar mult. best w Edwards -
@hyperelliptic so, in your opinion, no reason to use Curve25519 over Ed25519 for a DSA? /cc@pbarreto@matthew_d_green@JacksDismay -
@bascule@pbarreto@matthew_d_green@JacksDismay it's the same curve, it's one math object. Use Ed representation for signatures as in EdDSA -
@hyperelliptic@pbarreto@matthew_d_green@JacksDismay okay, so you're saying brand it "Curve25519" even though you mean EdDSA? -
@bascule You are talking about a representation and a set of operations; everyone else talking about underlying curve. -
@tqbf this was definitely the source of the confusion: https://twitter.com/bascule/status/393221414775312384 … /cc@hyperelliptic
End of conversation
New conversation -
-
-
@bascule@pbarreto@matthew_d_green@JacksDismay 2 things: math object dictates hardness of DL: use Curve25519 as brand because well studiedThanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.