Remix.run Logo
▲ GoblinSlayer 5 hours ago

ECDSA was added to DNSSEC 3 years before that blog post in april 2012 (rfc6605).

▲tptacek 3 hours ago | parent [-]

And then for the next 10 years APNIC wrote posts about how actually using ECDSA broke resolvers.

It's going to settle into general usability at just about the time cryptographers deprecate ECC entirely!

▲GoblinSlayer 42 minutes ago | parent [-]

They can be deprecated for confidentiality purpose, but DNSSEC doesn't use confidentiality.

▲tptacek 24 minutes ago | parent [-]

You're trying to argue that DNSSEC isn't exposed to HNDL attacks, so can use signature algorithms that CRQCs break. But that's neither here nor there: the approaching cryptographic research consensus is going to deprecate all ECC (and all RSA); yes, signatures aren't the priority for immediate removal, but nobody is recommending ECC signatures. The point is all this is happening just as ECC in DNSSEC may finally be stabilizing.