ECDSA client question

[Joseph Tam]

On Sun, 16 Dec 2018, Michael A. Peters wrote:

> We know there are unexplained constants in the NIST curves including P-256 - 
> what if NSA was partially responsible for this bug (back room deal to avoid 
> anti-trust prosecution, similar deal with IBM was made in the 70s I believe 
> also involving cryptography) so that Android apps that use ECDSA (beyond just 
> the mail client, e.g. chat apps) would use P-256 for compatibility and are 
> maybe vulnerable to MITM for the key exchange.
>
> I want Ed25519 now.

Bernstein fan?  Definitely off-topic, but the gist of his critique of
P-256 is that any possible deliberate sabotage of curve parameters is a
distraction from the real problem: complexity makes implementation
fumbles easy with distrastous consequences.

 	https://cr.yp.to/newelliptic/nistecc-20160106.pdf

Joseph Tam <jtam.home at gmail.com>