Subject: [Cfrg] Point compression that removes cofactor

From: Michael Hamburg <[email-masked]>
Date: Mon, 8 Dec 2014 14:40:46 -0800

Hi CFRG,

I’m trying to cook up a point compression/encoding system which removes the cofactor of cofactor-4 Edwards, twisted Edwards, Montgomery, generalized Huff and Jacobi Quartic curves.

Hypothetically, let’s suppose that the point compression format works, and it isn’t horribly complicated or easy to screw up, and it performs almost as well as the usual compression formats, and it masks the incompleteness of the a=-1 twisted Edwards formulae.

Proponents of cofactor-1 curves, would this mitigate the problems you see in those curves?  It would still require new code, both for the curve implementations and the compression format, but would you consider it to remove your protocol-level concerns?

Cheers,
— Mike