On Wed Sep 17 08:20:53 2025 +0000, Nikolay Sivov wrote:
This size is what we should validate against curve_strength() in principle? I don't mean that we need that now, especially because the size is fixed for ECC case.
I think so but it would need more testing. The X25519 curve would be a good candidate because its strength is 253 (despite its name). Also note that you can pass 0 for the size and you get the proper key strength, which I expect most app will do.