alt Hacker NewsWe do all have ECC in our cryptosystems right now, and given how long it's been there, we can rely on its security much more than something new.
We do all have ECC in our cryptosystems right now, and given how long it's been there, we can rely on its security much more than something new.
So clearly when I go look back at the archives of Bernstein discussing 25519, I'm going to see him advocating for FFDH/25519 cascades, right?
(If my subtext wasn't clear, by the way: the implementation history of ECC is godawful.)