committed
f0ad32c
Commit
Comments (0)
Files changed (1)
-
+1 -1M README.md
README.md Modified
- Ignore whitespace
-This implementation uses fixed parameters for the authentication protocol and it is based on a transposition of the protocol over elliptic curves presented in the following draft, https://tools.ietf.org/html/draft-hao-schnorr-00#section-3. Even though some tests were used, no security proof was realized and, as such, we do not guarantee its security and correctness.
+This implementation uses fixed parameters and replaces one of the cyclic groups over the integers module a large prime by a group over elliptic curves. The curve used is one of the recommended curves by NIST in http://csrc.nist.gov/groups/ST/toolkit/documents/dss/NISTReCur.pdf, namely the one termed as P-521. It defines a cyclic group with an order r with 521 bits. r-1 is divided by a large prime Q, with 470 bits, which we used for the cyclic group over the integers modulo Q. The parameters fulfill the security requirements defined for the protocol, namely the ones mentioned in the Internet draft by F. Hao in https://tools.ietf.org/html/draft-hao-schnorr-00#section-3. A small number of tests were performed to the implementation and it worked as it should for all of them. Nonetheless, we make no statements regarding its security or correctness. We paid no attention to side channel attack prevention mechanisms.