11 reputation
3
bio website
location
age
visits member for 6 months
seen Mar 19 at 14:16

Mar
14
comment Which eliptic curves in OpenSSL 1.0.1f meet all / most of the SafeCurves requirements?
Hi Tylo, I'm trying to do exactly as you suggested. One of the problems is that the OpenSSL curve names don't match up to the names used by Bernstein and Lange. If I'm right, B&L appear to only cover a few of the available OpenSSL curves in their handy charts. Since OpenSSL offers so many curves, I'm hoping one of those would rise to the top as being safer than the others (Again, using B&L's objective criteria).
Mar
14
comment Which eliptic curves in OpenSSL 1.0.1f meet all / most of the SafeCurves requirements?
Thanks, Richie. I appreciate the response. I'm prepared to accept that none of the supported OpenSSL curves will meet all of the Bernstein & Lange requirements. What I'm hoping to find is a curve or curves that meet many or most of the requirements. If OpenSSL has one or more curves that are objectively safer than the rest, then that information will help the community of people implementing OpenSSL make better decisions with respect to their security.
Mar
14
comment Which eliptic curves in OpenSSL 1.0.1f meet all / most of the SafeCurves requirements?
To: e-sushi, DrLecter, AFS, hunter, and rath Please review this question again. I have rewritten it and would like for one of you / somebody to provide an answer to the question instead of pedantry concerning the precise phrasing of the question.
Mar
14
revised Which eliptic curves in OpenSSL 1.0.1f meet all / most of the SafeCurves requirements?
Rewritten to avoid the possibility of opinion-based answers
Mar
14
awarded  Student
Mar
14
awarded  Informed
Mar
14
awarded  Editor
Mar
14
revised Which eliptic curves in OpenSSL 1.0.1f meet all / most of the SafeCurves requirements?
added 1109 characters in body; edited title
Mar
14
comment Which eliptic curves in OpenSSL 1.0.1f meet all / most of the SafeCurves requirements?
According to Bernstein and Lange, "These problems are exploitable by real attackers, taking advantage of the gaps between ECDLP and real-world ECC"
Mar
13
comment Which eliptic curves in OpenSSL 1.0.1f meet all / most of the SafeCurves requirements?
I explicitly asked "using the guidelines set forth by Bernstein and Lange on their site."
Mar
13
asked Which eliptic curves in OpenSSL 1.0.1f meet all / most of the SafeCurves requirements?