Safe curves in gnupg?

[Werner Koch]

On Tue, 18 Feb 2014 20:49, renato.martini at gmx.com said:

> In Brazil will use probably the Brainpool curves too, for example to a
> CA root the curve "brainpoolp512r1"  OID sets to "1 3 36 3 3 2 8 1 1
> 13". By the way, the Brainpool it is *not* supported yet in the

We support them in Libgcrypt and are listed in the curve selection menu
of gpg:

#if GPG_USE_EDDSA
    { "Ed25519",         0, 0, "Curve 25519" },
#endif
#if GPG_USE_ECDSA || GPG_USE_ECDH
    { "NIST P-256",      0, 1, },
    { "NIST P-384",      0, 0, },
    { "NIST P-521",      0, 1, },
    { "brainpoolP256r1", 0, 1, "Brainpool P-256" },
    { "brainpoolP384r1", 0, 1, "Brainpool P-384" },
    { "brainpoolP512r1", 0, 1, "Brainpool P-512" },
    { "secp256k1", 0, 1 },
#endif

In no expert mode there will only be Curve25519 and NIST P-384.  I
wonder whether I should allow Brainpool P-512r1 also in non-expert mode.


Shalom-Salam,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.