Questions tagged [ed448]
In cryptography, Curve448 or Curve448-Goldilocks is an elliptic curve potentially offering 224 bits of security and designed for use with the elliptic-curve Diffie–Hellman (ECDH) key agreement scheme.
11
questions
1
vote
0
answers
39
views
Standard vs. specific mappings in SP800-186 for code reuse between different curve models
The final SP800-186 outlines mappings between Twisted Edwards and Montgomery curves, and between Montgomery and Weierstrass curves.
These mappings are defined in Appendix B. Relationships Between ...
- 346
2
votes
2
answers
162
views
How is the edwards448 generator derived from the curve448 generator in RFC 7748?
In RFC 7748, it is explained how the Montgomery curve, curve448, is deterministically generated from the prime $p = 2^{448} - 2^{224} - 1$. It is also explained how the generator (given below) for ...
- 35
4
votes
2
answers
262
views
Ed448 parameters wrong in RFC7748
When implementing and testing my own EdDSA program I found out that the old RFC7748 gives wrong parameters for Ed448/Edwards448.
There is currently a new Draft were this is clarified:
https://...
- 43
0
votes
1
answer
98
views
ed448 generator choice in supercop
Mike Hamburg proposed the Ed448-Goldilocks curve and submitted a software implementation for it to the SUPERCOP project.
Below you can see that MH picked a generator (or base point) that has a y-...
- 35
3
votes
1
answer
598
views
Curve448 - Can Ed448 key material be reused for X448?
Currently I am facing a situation in which Ed448 key pairs (private + public key) are available and the system should be extended by a Diffie-Hellman (ECDH) operation. First of let me summarize what I ...
- 33
1
vote
0
answers
94
views
Why does EDDSA secret scaler pruning not prevent values >= prime L or zero?
I have been exploring and studying the EDDSA algorithm for curve 25519 and curve 448 in RFC 8032 (https://www.rfc-editor.org/rfc/rfc8032) as well as for curves 414 and 521 from this (https://eprint....
- 307
3
votes
1
answer
495
views
Public key derivation for Ed448
Another potentially silly question here, but I seem to have developed tunnel vision and I am missing something very basic.
In RFC 8032 one can find a number of test vectors for Ed488 - for example:
<...
- 71
4
votes
3
answers
603
views
Order of Edwards curve and its twist
In Mike Hamburg's Ed448-Goldilocks, a new elliptic curve (eprint 2015, WECCS 2015) it is studied untwisted Edwards curves in the prime field $\mathbb F_p$
$$E_d:\,y^2+x^2\,=\,1+d\,x^2\,y^2$$
with ...
- 138k
1
vote
1
answer
263
views
Performing EdDSA/Ed448 employing Montgomery ladder
EdDSA can be efficiently performed employing the Montgomery ladder. In order to implement this method, the base point should be converted to Mont. space, then the Mont. ladder should be executed, and ...
- 11
3
votes
1
answer
497
views
What is "spinal-tap grade" security?
As stated here Ed448 is different from Ed25519 because of "spinal-tap grade" security. What does this mean?
- 135
33
votes
2
answers
14k
views
Elliptic curve ed25519 vs ed448 - Differences
Other than key size, What are some differences between the Elliptic curve ed25519 and ed448?
- 2,257