Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Be more transparent about security parameter #88

Open
3 tasks
rheitjoh opened this issue Apr 7, 2021 · 1 comment
Open
3 tasks

Be more transparent about security parameter #88

rheitjoh opened this issue Apr 7, 2021 · 1 comment
Labels
Gitlab Old issue moved over from Gitlab repository

Comments

@rheitjoh
Copy link
Member

rheitjoh commented Apr 7, 2021

(This issue has been imported from the Gitlab repository because it seems to not have been addressed yet)

Original Text (Issue 181)

As it turns out, people have to select concrete security parameters for their schemes when using the BilinearGroupFactoryFactory.
The rough guideline was that security parameter x corresponds roughly to DLOG being as hard as AES with key length x.

However, there are probably better measures out there to judge how secure an elliptic curve is. I'd like the user to be able to easily see some basic measures (q, r, embedding degree, GT structure) that he can compare to values he sees on the internet.

So this ticket is threefold:

  • Find out what ecc parameters one should use (for supersingular curves, our source seems to be outdated)
  • Allow a way to view chosen curve parameters corresponding to a certain security parameters
  • Make it easier to instantiate a curve with given parameters (refactor the Factories that set up the elliptic curve groups)

This makes it easier for performance evaluation and easier for peoeple to judge what security level they actually get (if they're experts). I do not want to remove the current "just give me an AES-like security parameter" mechanism (but better explain it perhaps).

@rheitjoh rheitjoh added the Gitlab Old issue moved over from Gitlab repository label Apr 7, 2021
@rheitjoh
Copy link
Member Author

I updated the security parameter for the BN pairing some time ago.

We have also removed factories, so you just need to specify a security parameter. This makes the API very simple for the user.

Not sure how viable allowing the user to be more specific with the parameter specification would be. Or whether it is even worth it. For proper performance evaluation you would be using a wrapper class like Mcl, and Mcl does not allow for changing its parameters.

There is no way to easily view curve parameters without looking at the code, however. That might be worth adding.
For example as part of the documentation page.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Gitlab Old issue moved over from Gitlab repository
Projects
None yet
Development

No branches or pull requests

1 participant