Re: xmlsec / ECDSA problem
Martin Thomson <[email protected]>
| Newsgroups | gmane.comp.mozilla.crypto |
|---|---|
| Message-ID | <CAPLxc=UzJLr24FgTq15Ce9pgL0QYdqEotU2Jz4+u=GEg=oXpJA@mail.gmail.com> |
On Thu, Feb 16, 2017 at 4:22 AM, Gervase Markham <[email protected]> wrote: > Did things break when we disabled it? A few things. It lasted less than a day in Nightly before we got multiple bug reports. > Do we know why Chrome decided not to support it? Two NIST curves is enough? That's my understanding. P-521 isn't busted, it's just a little inefficient and not enough stronger than P-384 (or X448) that it is worth keeping around when faced with a working quantum computer. That and the fact that more options is more code to carry, more options to signal, and so forth. I think that's the reasoning. -- dev-tech-crypto mailing list [email protected] https://lists.mozilla.org/listinfo/dev-tech-crypto