Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add section on try and increment #153

Closed
JustinDrake opened this issue Jul 9, 2019 · 4 comments
Closed

Add section on try and increment #153

JustinDrake opened this issue Jul 9, 2019 · 4 comments

Comments

@JustinDrake
Copy link
Contributor

The current draft does not mention the "naive" try and increment. I feel implementers will undoubtedly want to consider it. If the intent is to discourage the use of try and increment a section explaining why it is discouraged may be warranted. If it is not discouraged then a section standardising it may also be warranted.

@burdges
Copy link

burdges commented Jul 10, 2019

I think try and increment is dead based on zkcrypto/pairing#56 (comment)

@JustinDrake
Copy link
Contributor Author

Try and increment has the advantage of being trivial to specify (though not implement optimally). It is also likely used in production today. Even if "dead", an explanatory death note is probably warranted.

@chris-wood
Copy link
Collaborator

We decided to omit a complete specification of try-and-increment since we're aiming for constant-time algorithms.

@JustinDrake
Copy link
Contributor Author

We decided to omit a complete specification of try-and-increment

I'm not asking for a specification of try-and-increment. I'm asking for a rationale for not specifying try-and-increment.

kwantam added a commit to kwantam/draft-irtf-cfrg-hash-to-curve that referenced this issue Oct 12, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants