- From: Harry Halpin <hhalpin@w3.org>
- Date: Thu, 12 Mar 2015 04:21:12 +0100
- To: "public-webcrypto@w3.org" <public-webcrypto@w3.org>
I believe this means that we should look into revisiting the additional CFRG-recommended curves, given various considerations outlined below and by the Working Group earlier. I suggest that we host another WebCrypto Working Group meeting next week or the week following to discuss after mailing list discussion. cheers, harry On 03/12/2015 12:16 AM, Harry Halpin wrote: > > > > -------- Forwarded Message -------- > Subject: New Liaison Statement, "Additional Curves" > Date: Wed, 11 Mar 2015 14:10:02 -0700 > From: Liaison Statement Management Tool <lsmt@ietf.org> > To: hhalpin@w3.org > > Title: Additional Curves > Submission Date: 2015-03-11 > URL of the IETF Web page: http://datatracker.ietf.org/liaison/1383/ > > From: Security Area (Mark Nottingham <mnot@mnot.net>) > > Body: To whom it may concern, > > Harry Halpin from W3C has indicated [1] that it may be > useful to send a status report about the work on additional > elliptic curves that is being done in the IETF and IRTF. > > The IETF TLS WG has asked for assistance from the IRTF > CFRG in the selection of some additional elliptic curves > with advantageous properties for use in TLS. It is highly > likely that other IETF work will re-use those curves when > they are adopted for use in TLS. The TLS WG has previously > gotten similar advice from CFRG in relation to e.g. the > chacha algorithm, so this is not an uncommon process in > the IETF context. > > To date, CFRG has reached consensus on two curves at > different security levels; one of them is currently > documented in [2]. Additional work is still required to > specify cryptographic algorithms using these curves; this > work is on-going in CFRG. > > We would be happy to see W3C work with the IETF and CFRG > as this work proceeds to ensure that WebCrypto and TLS > expose the same curves and, insofar as possible, the same > algorithms. > > Regards, > Stephen Farrell & Kathleen Moriarty > (Security area directors) > > [1] https://www.ietf.org/mail-archive/web/cfrg/current/msg06424.html > [2] https://datatracker.ietf.org/doc/draft-irtf-cfrg-curves/ > Attachments: >
Received on Thursday, 12 March 2015 03:21:16 UTC