l...@gnu.org (Ludovic Courtès) skribis:

> Christian Grothoff <groth...@in.tum.de> skribis:
>
>> On 03/14/2014 02:27 PM, Ludovic Courtès wrote:
>>> Guix is not tied to any particular public key crypto algorithm.
>>> Currently we typically use RSA key, as you note, but we could just as
>>> well tell libgcrypt to use something else, no?
>>
>> Yes, and my point is you should.  I also do not believe in giving
>> users choices in this respect, as they will invariably make bad
>> choices.
>
> Heh, right.
>
>> For GNS-compatibility, you should use ECDSA on Curve25519 with RFC 6979
>> (deterministic ECDSA).
>
> OK, then we should make it the default.  IIUC, this should be:
>
>   (genkey (ecdsa (curve Ed25519) (flags rfc6979)))

Done:
<http://git.savannah.gnu.org/cgit/guix.git/commit/?id=1cbfce16691327bd309d6b03d8cbe3aef38e57bf>.

Ludo’.

Reply via email to