waxwing on Nostr: "invariable" - meaning what? unjustified choice of generator - is a fascinating piece ...
"invariable" - meaning what?
unjustified choice of generator - is a fascinating piece of trivia, but is not worrying *in itself* when you take into account random self-reducibility.
On the other hand curve25519 is *not prime order* and that is a *huge* deal in practical security, it has bitten so many people.
DJB is incredible and I agree wholeheartedly about the Applebaum case. But he's not a God. You hear this kind of thing constantly, like people thinking "Bitcoin uses ECDSA, it doesn't have deterministic random nonces, lol, how could you be dumb enough not to use the industry standard Ed25519", just showing complete and utter ignorance of what these protocols actually are, and what Bitcoin is and how it changed over the years (sorry slight tangent but it's illustrative of a very ignorant attitude).
unjustified choice of generator - is a fascinating piece of trivia, but is not worrying *in itself* when you take into account random self-reducibility.
On the other hand curve25519 is *not prime order* and that is a *huge* deal in practical security, it has bitten so many people.
DJB is incredible and I agree wholeheartedly about the Applebaum case. But he's not a God. You hear this kind of thing constantly, like people thinking "Bitcoin uses ECDSA, it doesn't have deterministic random nonces, lol, how could you be dumb enough not to use the industry standard Ed25519", just showing complete and utter ignorance of what these protocols actually are, and what Bitcoin is and how it changed over the years (sorry slight tangent but it's illustrative of a very ignorant attitude).