1
mirror of https://github.com/jedisct1/libsodium.git synced 2024-12-19 18:15:18 -07:00

Not all the constants have been "picked by theorems".

This commit is contained in:
Frank Denis 2014-01-03 21:40:45 +01:00
parent b70aa80cc6
commit dfd555df5d

View File

@ -16,8 +16,7 @@ fork of NaCl (based on the latest released upstream version [nacl-20110221](http
The design choices, particularly in regard to the Curve25519
Diffie-Hellman function, emphasize security (whereas NIST curves
emphasize "performance" at the cost of security), and "magic
constants" in NaCl/Sodium are picked by theorems designed to maximize
security.
constants" in NaCl/Sodium have clear rationales.
The same cannot be said of NIST curves, where the specific origins of
certain constants are not described by the standards.