[tor-talk] NIST approved crypto in Tor?

2013-09-07 Thread Sebastian G.
Hi, Tor switches over to ECC what's a reasonable step. I'm unable to find the blog post (or maybe it was an official comment on the blog) [With DDG and StartPage] where someone said that if the NIST (I guess) is not lying ECC is safe. Is the ECC used by Tor in some way certified by NIST? Are ot

Re: [tor-talk] NIST approved crypto in Tor?

2013-09-07 Thread Nick Mathewson
On Sat, Sep 7, 2013 at 5:25 AM, Sebastian G. wrote: > Hi, > > Tor switches over to ECC what's a reasonable step. > > I'm unable to find the blog post (or maybe it was an official comment on > the blog) [With DDG and StartPage] where someone said that if the NIST > (I guess) is not lying ECC is sa

Re: [tor-talk] NIST approved crypto in Tor?

2013-09-07 Thread Yawning Angel
On 2013-09-07 10:02, Nick Mathewson wrote: > The elephant in the room here is TLS itself. Frankly, I'm starting to > think we should cut the Gordian Knot here and start a little > independent protocol group of our own if the TLS working group can't > get its act together and have one really good c

Re: [tor-talk] NIST approved crypto in Tor?

2013-09-07 Thread Sebastian G.
07.09.2013 19:02, Nick Mathewson: Do not dare to reply again before your weekend is over. Probably don't even read it. > On Sat, Sep 7, 2013 at 5:25 AM, Sebastian G. > wrote: >> >> Tor switches over to ECC what's a reasonable step. >> >> I'm unable to find the blog post (or maybe it was an offi

Re: [tor-talk] NIST approved crypto in Tor?

2013-09-07 Thread anonymous coward
Bruce Schneier recommends *not* to use ECC. It is safe to assume he knows what he says. -- tor-talk mailing list - tor-talk@lists.torproject.org To unsusbscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Re: [tor-talk] NIST approved crypto in Tor?

2013-09-07 Thread Juan Garofalo
At 11:08 PM 9/7/2013 +, you wrote: >Bruce Schneier recommends *not* to use ECC. It is safe to assume he >knows what he says. But, but, isn't Schneier a crazy conspiracy theorist? -- tor-talk mailing list - tor-talk@lists.torproject.org To unsusbscribe or change other settings go t

Re: [tor-talk] NIST approved crypto in Tor?

2013-09-07 Thread Gregory Maxwell
On Sat, Sep 7, 2013 at 4:08 PM, anonymous coward wrote: > Bruce Schneier recommends *not* to use ECC. It is safe to assume he > knows what he says. I believe Schneier was being careless there. The ECC parameter sets commonly used on the internet (the NIST P-xxxr ones) were chosen using a publish

Re: [tor-talk] NIST approved crypto in Tor?

2013-09-08 Thread Gregory Maxwell
On Sat, Sep 7, 2013 at 8:09 PM, Gregory Maxwell wrote: > On Sat, Sep 7, 2013 at 4:08 PM, anonymous coward > wrote: >> Bruce Schneier recommends *not* to use ECC. It is safe to assume he >> knows what he says. > > I believe Schneier was being careless there. The ECC parameter sets > commonly used