[Cryptech Core] 25519 in hardware

[Joachim Strömbergson]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Aloha!

Pavel Shatov wrote:
> Hi,
> 
> I started looking into what it takes to add Curve25519 support in 
> hardware. After reading Bernstein's paper for a dozen times (and a
> dozen of other papers) I think I finally understand the underlying
> math.
> 
> Now do I get it right, that the thing we want to do in the FPGA is
> the X25519 function? The two inputs will be 256-bit scalar and
> 256-bit x-coordinate, and the output will be 256-bit x-coordinate of
> the product.

Cool. If the target use case is ECDH, yes. I assume you've also read RFC
7748. If not, it might be helpful.

https://tools.ietf.org/html/rfc7748

Note that there is errata.

- -- 
Med vänlig hälsning, Yours

Joachim Strömbergson - Assured AB
========================================================================

-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=V0B1
-----END PGP SIGNATURE-----