one ecc key-pair for both encryption and signature?
bernhard at intevation.de
Mon Jan 10 10:39:27 CET 2022
Am Freitag 07 Januar 2022 20:23:33 schrieb Robert J. Hansen via Gnupg-users:
> > There is anequivalence given (two functions) in the Ed25519 wikipedia
> > page, but I don't know if this allows the same curve used in both
> > algorithms.
> Likewise, Edwards DSA can be tortured into becoming a Curve25519 key.
> But once you do that, *you're no longer using Edwards DSA*.
Can you be more specific why this is a problem?
Is it because the two transformation functions
a) create numerical problems
b) or runtime problems letting out information about the private key (thus
being a side channel)
c) or just the additional time needed for them
(Andrew and Robert, thanks for your answers, you have already helped me to
understand that detail better.)
www.intevation.de/~bernhard +49 541 33 508 3-3
Intevation GmbH, Osnabrück, DE; Amtsgericht Osnabrück, HRB 18998
Geschäftsführer Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 659 bytes
Desc: This is a digitally signed message part.
More information about the Gnupg-users