Mike Rosing (eresrch@msn.fullfeed.com)
Tue, 14 Jul 1998 09:19:47 -0500 (CDT)
On Tue, 14 Jul 1998, Anonymous wrote:
> However, anonymity hasn't cured me of all my stubbornness -- I still
> wouldn't trust an EC algorithm alone for my key distribution. Although I
> had a somewhat exaggerated idea of the disparity between the amounts of
> study of ECDLP and DLP cryptosystems, the truth is still that DH _has_
> been around longer than ECDH, and there simply aren't that many advantages
> of replacing Diffie-Hellman with the EC variant in a PGP-like
> key-distribution application (I know that there are many keydist
> applications where having greater speed and shorter widgets to toss around
> is more significant, and in those cases I'd certainly consider it).
Your lack of trust comes from lack of understanding. EC math has been
around for 200 years, and EC crypto for 13. DH is only 25 years old,
still quite a youngster. The fundamental problem which makes these
systems secure is the inability to find a shortcut to solving the DLP.
EC crypto gives more security in fewer bits and because you can
use simple XOR to do all the math it is easy to implement. That makes it
quite useful for many applications.
> I guess I shouldn't say that unless I'm prepared to code, but, oh well,
> too late. :)
Quite right. EC code is available and could use some improvement (better
faster cheaper is the mantra) so dig in. For source see
http://msn.fullfeed.com/~eresrch/
Patience, persistence, truth,
Dr. mike
The following archive was created by hippie-mail 7.98617-22 on Fri Aug 21 1998 - 17:20:22 ADT