This commit introduces domain separation for P256 scalar sampling via the salt argument for hkdf_extract, thereby addressing #12.
In addition random_scalar will now panic if provided insufficient random bytes.
I have also introduced domain separation constants at all the call sites of random_scalar.
This commit introduces domain separation for P256 scalar sampling via the
salt
argument forhkdf_extract
, thereby addressing #12. In additionrandom_scalar
will now panic if provided insufficient random bytes.I have also introduced domain separation constants at all the call sites of
random_scalar
.