<HTML><BODY style="word-wrap: break-word; -khtml-nbsp-mode: space; -khtml-line-break: after-white-space; "><DIV><BR class="khtml-block-placeholder"></DIV><DIV>Now that I've looked through the code for LTC SHA-512, I'm pretty sure that I can examine LTC SHA-256 in a day or two. Is there an imminent deadline I should know about?</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>As for the 256-bit curve: yes, it will trigger unaudited code paths, but that's because I haven't yet audited every function used by the ECC package. ECC uses a lot of math, for example, and I haven't yet looked at each mathematical function yet. However, I can say that the 256-bit curve defined in LTC matches the NIST recommendation, and that the unaudited code paths triggered by that curve will be in the underlying math functions, not LTC itself. </DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV><BR class="khtml-block-placeholder"></DIV><BR><DIV> <SPAN class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px 0px; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-align: auto; -khtml-text-decorations-in-effect: none; text-indent: 0px; -apple-text-size-adjust: auto; text-transform: none; orphans: 2; white-space: normal; widows: 2; word-spacing: 0px; "><DIV>--</DIV><DIV>Jonathan Herzog</DIV><DIV>Cryptographic consulting</DIV><DIV><A href="mailto:jherzog@jonathanherzog.com">jherzog@jonathanherzog.com</A></DIV><DIV>www.jonathanherzog.com</DIV><BR class="Apple-interchange-newline"></SPAN> </DIV><BR><DIV><DIV>On Jul 10, 2007, at 1:14 PM, Ivan Krstić wrote:</DIV><BR class="Apple-interchange-newline"><BLOCKQUOTE type="cite"><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Jon, do you think you would be able to audit the LTC SHA-256 code reasonably quickly, and do you have qualms about the NIST 256-bit ECC curve triggering unaudited code paths? I'm not familiar with that code.</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">--</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Ivan Krstić <krstic@solarsail.hcs.harvard.edu> | <A href="http://radian.org">http://radian.org</A></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV> </BLOCKQUOTE></DIV><BR></BODY></HTML>