[prev in list] [next in list] [prev in thread] [next in thread] 

List:       openssh-unix-dev
Subject:    Re: curve25519
From:       Loganaden Velvindron <loganaden () gmail ! com>
Date:       2015-06-13 13:34:25
Message-ID: CAOp4FwSFdG8ED-1bLC0gpSKAUJLqeMHtU_18H=ruA3ALdZRu+Q () mail ! gmail ! com
[Download RAW message or body]

On Sat, Jun 13, 2015 at 1:21 PM, Aris Adamantiadis <aris@0xbadc0de.be> wrote:
> Hi,
>
> The main advantage of your contribution is a speed increase. The
> disadvantage is that your implementation has not been reviewed for security
> by experts yet, and thus is not as reliable as the reference implementation.
> I believe OpenSSH (and libssh from my pov) is not the right place to
> introduce experimental cryptographic code. The speed increase advantage is
> not very relevant to SSH, because the key exchange happens only once per
> session (on average), and we were using much slower algorithms till last
> year (DH and ECDH), that nobody ever complained about.
>
> You should probably try to get that code to be part of OpenSSL. I Believe

Or LibreSSL :)
_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@mindrot.org
https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev
[prev in list] [next in list] [prev in thread] [next in thread]