Re: comments on web crypto API: Diffie-Hellman parameters [3/6]

On 2013-05-23 19:13, Ryan Sleevi wrote:

>> The diffie-hellman parameters in 19.13.3 are restricted to the prime 
>> and
>> generator. With that information special parameters that allow for
>> optimizations (see "Computational Introduction to Number Theory and 
>> Algebra"
>> by V. Shoup) are not allowed (an example is when p=2wq+1). An easy 
>> way to
>> overcome this restriction would be to add an additional parameter 
>> that
>> indicates the desired size of the private key, similarly to PKCS #3 
>> format
>> for DH.
> This omission was intentional, due to lack of wide implementation of 
> support.

Hello,
  It could be, but that doesn't sound like a good reason. The fact that 
current implementations are sub-optimal doesn't really justify 
preventing others from being faster.

regards,
Nikos

Received on Friday, 24 May 2013 14:07:45 UTC