Is this implementation safe against the Degenerate Curve Attacks published Dec 2015?

CodesInChaos / Chaos.NaCl

Chaos.NaCl cryptography library

Other

131 stars 54 forks source link

Is this implementation safe against the Degenerate Curve Attacks published Dec 2015? #10

Open SparkDustJoe opened 8 years ago

SparkDustJoe commented 8 years ago

https://eprint.iacr.org/2015/1233.pdf

Is this implementation of Curve25519 formulated in such a way (and are its inputs "sanity checked") as to negate the attacks defined by Samuel Neves and Mehdi Tibouchi?

I'm using your implementation of NaCl in an implementation of miniLock, and am curious.

SparkDustJoe/miniLockManaged