Subject: [Cfrg] Attacks on key agreement in SM2

From: Watson Ladd <[email-masked]>
Date: Wed, 19 Feb 2014 18:44:56 -0800

Dear all,
I haven't read the paper yet, but this looks worrying.
http://dl.acm.org/citation.cfm?id=2188922.
This doesn't mean the curves or the hash function are bad, but we
might want to note that this sort of thing is possible.

Sincerely,
Watson Ladd