Editorial comments for Table 1 #6 (from Expert Review)

cfrg / draft-irtf-cfrg-pairing-friendly-curves

https://datatracker.ietf.org/doc/draft-irtf-cfrg-pairing-friendly-curves/

Other

8 stars 6 forks source link

Editorial comments for Table 1 #6 (from Expert Review) #25

Closed yumi-sakemi closed 4 years ago

yumi-sakemi commented 4 years ago

Comments from Chloe (Expert Reviewer)

From which source do you get 128-bit security for BN384, BN382? I think the attacks of [BD18] give a security level of much less than 128 for these examples.

yumi-sakemi commented 4 years ago

The curves categorized into 'Arnd 128-bit', 'Arnd 192-bit' and 'Arnd 256-bit' for each label show that their security levels are within the range of plus/minus 5 bits for each security level. So, as Chloe pointed out, the security level of BN384 and BN382 are less than 128-bit but they are categorized into 'Arnd 128-bit'.

Tsune3110 commented 4 years ago

OK!

This is a cross-check as a co-author.

yumi-sakemi commented 4 years ago

Thank you for your checking :-) I close this issue.