TripleDH combines the three DH values by feeding them into a hash function.
What would be lost by using addition in the curve instead? I.e. KDF( DH(a,b) + DH(A,b) + DH(a,B) ) I won't be doing this myself, but it appears this would be somewhat faster as the DH operations can be done together, so I got curious. Thanks, Jeff
signature.asc
Description: This is a digitally signed message part
_______________________________________________ Messaging mailing list [email protected] https://moderncrypto.org/mailman/listinfo/messaging
