Advice on choosing a curve

re #1187 
I'm not entirely sure what you are suggesting. Replacing "recommended" with 
"must not"?


On 29 June 2014 21:05:54 Alex Gaynor <notifications@github.com> wrote:

> > @@ -126,13 +126,27 @@ Elliptic Curve Signature Algorithms
> >  Elliptic Curves
> >  ---------------
> >
> > -All named curves are providers of
> > -:class:`~cryptography.hazmat.primtives.interfaces.EllipticCurve`.
> > +Elliptic curves provide equivalent security at much smaller sizes than
> > +asymmetric cryptography systems such as RSA or DSA. They also can provide
> > +higher performance at every security level. According to NIST they can 
> have as
> > +much as a `64x lower computational cost than DH`_.
> > +
> > +.. note::
> > +    Curves with a size of `less than 224 bits`_ are not recommended to 
> be used
> > +    past the year 2010.
>
> 2010 is already in the past, seems like we should be more perscriptive: 
> don't make any new applications with these curves, if you have an old one, 
> seriously look at upgrading it, this is the same as having an 8-byte key.
>
> ---
> Reply to this email directly or view it on GitHub:
> https://github.com/pyca/cryptography/pull/1195/files#r14331186