Исходное сообщение
"Доступен OpenVPN 2.5.0" Отправлено Аноним, 28-Окт-20 17:46
безопасная эллиптика? конечно, кому надо безопасная. (ANSIX9.62/SEC2/NIST): The curve-generation process has a large unexplained input, giving the curve generator a large space of curves to choose from. Consider, for example, a curve-generation process that takes y^2=x^3-3x+H(s) meeting various security criteria, where s is a _large random "seed"_ and H is a hash function. No matter how strong H is, a malicious curve generator can search through many choices of s, checking each y^2=x^3-3x+H(s) for vulnerability to a secret attack; this works if the secret attack applies to (e.g.) one curve in a billion. Koblitz: The curve-generation process is not completely explained, but the unexplained parts do not give the curve generators many bits of control. “We don’t know how Q = [d]P was chosen, so we don’t know if the algorithm designer knows d.”