you are viewing a single comment's thread
view the rest of the comments
[–] 4 points 2 years ago* (last edited 2 years ago) (1 child)

I run a cryptography forum, I know this stuff, and the problem isn't algorithmic weakness but complexity of implementation.

All major browsers and similar networking libraries now have safe implementations after experts have taken great care to handle the edge cases.

It's not a fault with let's encrypt. If they allowed nonstandard curves then almost nothing would be compatible with it, even the libraries which technically have the code for it because anything not in the TLS spec is disabled.

https://security.stackexchange.com/questions/42088/can-custom-elliptic-curves-be-used-in-common-tls-implementations

https://cabforum.org/baseline-requirements-certificate-contents/

CAB is the consortium of Certificate Authorities (TLS x509 certificate issuers)

With that said curve25519 is on its way into the standards

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 2 years ago (2 children)

    Tldr would be that there are no safe ECC curves in TLS? Yet

  • source
  • parent
  • hideshow 4 child comments