Re: [OT: DNSCurve] Resolvers w/o key -> HMAC Proposal

On Sun, Dec 6, 2009 at 2:43 AM, Erwin Hoffmann <[email protected]> wrote:
> d) [A] encrypts Query with Pubkey of [B] including the Nonce.

The main downside to this is that public-key encryption (e.g., RSA at
a comparable security level to Curve25519) requires much larger
public-keys, takes a lot more time to encrypt and decrypt, and would
expand the query size significantly.  You also don't get the benefit
of being able to cache Diffie-Hellman computations.