Results 13 comments of goldbe

Have you seen our IETF Internet draft on VRFs? (The bug in CONIKS and KT you mention above was reported by us...) https://datatracker.ietf.org/doc/draft-goldbe-vrf/

Yes, see you in Prague! Would love to work with you guys,

Sounds fine to me

Shumon any updates on getting the algorithm numbers?

looks like someone made this change already so i am closing this issue.

cool. change it then :)

We have _curve2 for Ed25519 (it is Elligator) but not for P256. However _curve1 works for P256 and Ed25519. That's why its there.

We added Elligator for Curve25519 in draft-irtf-cfrg-vrf-02 We don't have an equivalent constant time hash for Curve P256 yet.

Jan, we need to specify a wire format for the public key. In the NSEC5 draft we say that the VRF draft specifies the public key format. If I understand...

I guess its fine. We don't have to do this in the VRF draft. We do indeed define the wire format for the NSEC5 keys in the Section 4 of...