Phantasm on Nostr: meso from wiki: >Curve25519 is constructed such that it avoids many potential ...
meso (nprofile…gx4l)
from wiki:
>Curve25519 is constructed such that it avoids many potential implementation pitfalls.
There isn't really anything special about the equation itself, or the numbers. The numbers were chosen mostly at random with consideration for some properties as to not undermine the "security" behind the elliptic discrete log problem.
https://en.wikipedia.org/wiki/Nothing-up-my-sleeve_number
On a related note: The reason why the DUAL_EC_DRBG (Dual elliptic curve deterministic random bit generator) was a suspected backdoor by the NSA is specifically because the NSA didn't disclose how they got the number. For example the SHA hash algorithms also depend on these randomly selected variables (one of them is pi with some amount of decimal accuracy; there's also letters in the alphabet and stuff like that; something you wouldn't suspect was placed there to compromise the system). The ChaCha stream cipher also has a part of the table that is always at the beginning the same value. In the ChaCha case it literally describes what the algorithm does (expand 32-byte k)
from wiki:
>Curve25519 is constructed such that it avoids many potential implementation pitfalls.
There isn't really anything special about the equation itself, or the numbers. The numbers were chosen mostly at random with consideration for some properties as to not undermine the "security" behind the elliptic discrete log problem.
https://en.wikipedia.org/wiki/Nothing-up-my-sleeve_number
On a related note: The reason why the DUAL_EC_DRBG (Dual elliptic curve deterministic random bit generator) was a suspected backdoor by the NSA is specifically because the NSA didn't disclose how they got the number. For example the SHA hash algorithms also depend on these randomly selected variables (one of them is pi with some amount of decimal accuracy; there's also letters in the alphabet and stuff like that; something you wouldn't suspect was placed there to compromise the system). The ChaCha stream cipher also has a part of the table that is always at the beginning the same value. In the ChaCha case it literally describes what the algorithm does (expand 32-byte k)