Re: Double-checking with NUMS and Curve 25519 [was Re: Elliptic Curve Extensibility - your view is expected] from Trevor Perrin on 2014-10-17 (public-webcrypto@w3.org from October 2014)

From: Trevor Perrin <trevp@trevp.net>
Date: Fri, 17 Oct 2014 16:16:28 -0700
To: Mark Watson <watsonm@netflix.com>
Cc: Brian LaMacchia <bal@microsoft.com>, Richard Barnes <rlb@ipv.sx>, Harry Halpin <hhalpin@w3.org>, "public-webcrypto@w3.org Working Group" <public-webcrypto@w3.org>
Message-ID: <CAGZ8ZG2aUNkyKvmcxmf1Ww-QWcY=moJbt5GXtN5S4k3epoxkGQ@mail.gmail.com>

On Fri, Oct 17, 2014 at 3:54 PM, Mark Watson <watsonm@netflix.com> wrote:
> Trevor,
>
> Look again - I just updated it.

OK.  The PKCS8 looks like the extension point isn't in the right place
- e.g. in ECDH ImportKey, the "Otherwise" is after stuff has been
parsed.

You're also assuming the JWK "EC" type, which requires full x and y
coordinates, so disallows single-coordinate or compressed public keys.

Those could be fixed - whether all this is saving any effort or
cleaner than just defining new algorithms, I don't have strong
opinions on.

Trevor

Received on Friday, 17 October 2014 23:16:56 UTC