W3C home > Mailing lists > Public > public-webcrypto@w3.org > May 2012

Re: ECC vs RSA, and Similar Conflicts

From: Cullen Jennings <fluffy@cisco.com>
Date: Thu, 10 May 2012 07:42:37 -0600
Cc: public-webcrypto@w3.org
Message-Id: <428C51FA-2EEC-4042-99D6-792661BB64CE@cisco.com>
To: Nadim <nadim@nadim.cc>

One way to deal with the ECC / RSA issues is instead provide the underlining big math libraries that are needed to implement these and leave the actually IPR encumbered implementation to an JS library. If done right, this would could have approximately the same performance as a native implementation. 

On May 9, 2012, at 11:33 AM, Nadim wrote:

> Hi everyone,
> I think we need to have a discussion regarding whether the API will exclusively implement (and rely on) newer, faster standards (such as ECDH, ECDSA) or whether there will be a larger dependence on RSA, either for fallback or stronger compatibility reasons.
> If it is eventually decided that not only the best available per-task algorithm is implemented, but rather, all possible algorithms, where do we draw the line? Do we implement SHA1 in addition to SHA2? Does that also warrant an MD5 implementation?
> Personally, I believe that focusing only on the newer, more efficient standards (such as ECC) is a better idea, but I stand very humbly by my opinion and a much more interested in listening to the group's opinions.
> Thank you,
> NK
Received on Thursday, 10 May 2012 13:43:11 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 19:01:01 UTC