[tor-dev] SHA-3 isn't looking so hot to me

[Ian Goldberg]

On Fri, Nov 04, 2011 at 01:01:09PM +0000, Robert Ransom wrote:
> I have also seen parameters for an Edwards curve equivalent to
> Curve25519; we will need the Edwards-curve parameters in order to
> implement point addition efficiently in constant time for our EC
> signature scheme.

Hmm?  curve25519 _is_ an Edwards curve (that's why it has that slightly
annoying non-prime order), and djb's implementation, at least, is
supposed to be constant-time.

   - Ian