Post BAbXBjDSfRXkqFgJVI by lanodan@queer.hacktivis.me
 (DIR) More posts by lanodan@queer.hacktivis.me
 (DIR) Post #BAbNoS5vGAlnUZyumm by niconiconi@mk.absturztau.be
       1 likes, 0 repeats
       
       Found yet another OpenSSL gotcha: secp256k1 is very, very slow, running at 10% speed comparison to NIST P-256 (secp256r1) and X25519. secp256k1 is a pretty fast curve, but due to its lack of TLS applications, almost no manpower was dedicated to its optimization. There was an open Pull Request but the code involved multiple projects and people, which made CLA signing and merging impossible. Conclusion: if you don't trust NIST P-series, just use X25519. Using secp256k1 can be more susceptible to handshake DoS. https://github.com/openssl/openssl/issues/23524 #tls #openssl #crypto
       
 (DIR) Post #BAbXBjDSfRXkqFgJVI by lanodan@queer.hacktivis.me
       0 likes, 0 repeats
       
       @niconiconi Yet another way for CLAs to suck big time.