[Cryptech Tech] 25519 implementation

[Randy Bush]

> What was the cfrg interim consensus on curves - what are they
> suggesting to use? NIST curves?

no consensus.  overly strong chair blocked it imiho.  sean will write a
"how to do 25519 in ietf" draft, and cfrg will try to make a recco by
july for toronto.

but, for example, they were willing to give a large amount of air time
to the microsoft work which is not public, may never be, and has no deep
outisde review.

also large air time to assuring everyone that nist curves can be done
safely by an expert if they stand on their left foot while holding their
right ear.

and no air time, and i mean zero, to lange and bernstein.

it was somewhere between embarrassing and really off pissing.  and this
was the cisco co-chair, not the nsa one.

randy