Hacker News Reader

Bold move, defaulting to Curve25519 ECDH.

I'm not saying DH/DLP is broken, but the NSA declines to include non-EC DH (or RSA, for that matter) in their Suite B of algorithms approved for internal applications. It's nice to have the option of ECDH for day to day use.

http://en.wikipedia.org/wiki/NSA_Suite_B_Cryptography

View on HN

Aside from any security implications for EC, there's also a lot of practical benefits around the reduced sizes necessary.

We made a Suite B implementation for TPM's (where smaller key sizes are very very important).

Just for interest [I'm not saying it's broken either] but this is interesting DLP progress announced within the last 12 hours:

https://listserv.nodak.edu/cgi-bin/wa.exe?A2=NMBRTHRY;23651c...

Reply on news.ycombinator.com