4 Nov
2011
4 Nov
'11
2:24 p.m.
On Fri, Nov 04, 2011 at 01:01:09PM +0000, Robert Ransom wrote:
I have also seen parameters for an Edwards curve equivalent to Curve25519; we will need the Edwards-curve parameters in order to implement point addition efficiently in constant time for our EC signature scheme.
Hmm? curve25519 _is_ an Edwards curve (that's why it has that slightly annoying non-prime order), and djb's implementation, at least, is supposed to be constant-time.
- Ian