search

GeorgeLyon / Opaque

An implementation of the OPAQUE protocol
MIT License
29 stars 2 forks source link

Use Curve25519 for the Cyclic Group of Prime Order #3

Open louisabraham opened 4 years ago

louisabraham commented 4 years ago

The base point x=9 gives a cyclic group of prime order. This solves the issue of the parameter choice in secp256r1.

louisabraham commented 4 years ago

In fact it's what Ristretto does (give a group of prime order): https://libsodium.gitbook.io/doc/advanced/point-arithmetic/ristretto