X25519 for TLS

Curve25519, designed by Prof. Dan Bernstein, is one of the two curves selected by the CFRG for recommendation. When compared to P-256, the most commonly used curve in TLS today, it admits simpler, faster implementations that are more naturally resistant to side-channels.

In Chrome 50, we will be adding support for X25519, the Diffie-Hellman primitive over curve25519, to TLS.