alt Hacker NewsSo clearly when I go look back at the archives of Bernstein discussing 25519, I'm going to see him advocating for FFDH/25519 cascades, right?
(If my subtext wasn't clear, by the way: the implementation history of ECC is godawful.)
So clearly when I go look back at the archives of Bernstein discussing 25519, I'm going to see him advocating for FFDH/25519 cascades, right?
(If my subtext wasn't clear, by the way: the implementation history of ECC is godawful.)
Was FFDH considered safe?
> the implementation history of ECC is godawful
You do know that new cryptographic code can be godawful, then?