Skip to content

Be more transparent about security parameter #88

Open
@rheitjoh

Description

@rheitjoh

(This issue has been imported from the Gitlab repository because it seems to not have been addressed yet)

Original Text (Issue 181)

As it turns out, people have to select concrete security parameters for their schemes when using the BilinearGroupFactoryFactory.
The rough guideline was that security parameter x corresponds roughly to DLOG being as hard as AES with key length x.

However, there are probably better measures out there to judge how secure an elliptic curve is. I'd like the user to be able to easily see some basic measures (q, r, embedding degree, GT structure) that he can compare to values he sees on the internet.

So this ticket is threefold:

  • Find out what ecc parameters one should use (for supersingular curves, our source seems to be outdated)
  • Allow a way to view chosen curve parameters corresponding to a certain security parameters
  • Make it easier to instantiate a curve with given parameters (refactor the Factories that set up the elliptic curve groups)

This makes it easier for performance evaluation and easier for peoeple to judge what security level they actually get (if they're experts). I do not want to remove the current "just give me an AES-like security parameter" mechanism (but better explain it perhaps).

Metadata

Metadata

Assignees

No one assigned

    Labels

    GitlabOld issue moved over from Gitlab repository

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions