Determine whether or not to replace CryptoKit for signing transactions and messages

Concordium / concordium-swift-sdk

Mozilla Public License 2.0

4 stars 1 forks source link

Open bisgardo opened 4 months ago

bisgardo commented 4 months ago

Apple's CryptoKit implementation of Ed25519 (Curve25519.Signing) does not produce deterministic signatures.

There has been some concern internally about whether or not this is a problem.

Alternatives to consider:

tschudid commented 3 months ago

This should be fine. The non-determinism is likely to protect against fault-attacks. See https://www.ietf.org/id/draft-irtf-cfrg-det-sigs-with-noise-03.html for more details on this type of "hedged" signatures.