Hi,
I have reviewed this draft and would like these comments to be treated
just like any other last call comments.
This draft will obsolete RFC 4753 (if approved) and before it does I
would like to see it slightly modified to address a discrepancy between
RFC 4753 and RFC 5114, both of which define the parameters for curves
19-21 (from the IANA registry) differently.
Specifically, this draft, and RFC 4753, gives the equations of elliptic
curves defined over a prime field as y^2 = x^3 - 3x + b. Since a prime
field is defined as [0, 1, ..., p-1] I would like to see these curves
defined in the more general way as y^2 = x^3 + ax + b and then define the
value "a" such that a=p-3 for each curve depending on the prime, p:
3.1 256-bit Random ECP Group
The equation for the elliptic curve is:
y^2 = x^3 + ax + b
Group curve parameter a
FFFFFFFF 00000001 00000000 00000000 00000000
FFFFFFFF FFFFFFFF FFFFFFFC
3.2 384-bit Random ECP Group
The equation for the elliptic curve is:
y^2 = x^3 + ax + b
Group curve parameter a
FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF
FFFFFFFF FFFFFFFE FFFFFFFF 00000000 00000000 FFFFFFFC
3.3 521-bit Random ECP Group
The equation for the elliptic curve is:
y^2 = x^3 + ax + b
Group curve parameter a
01FFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF
FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF
FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFC
Thank you, and regards,
Dan.
_______________________________________________
IPsec mailing list
IPsec@ietf.org
https://www.ietf.org/mailman/listinfo/ipsec
