cryspen / atlas

BMBF ATLAS project
https://cryspen.com/atlas/
4 stars 1 forks source link

Introduce domain separation & panic on insufficient randomness for scalar sampling #38

Closed jschneider-bensch closed 1 year ago

jschneider-bensch commented 1 year ago

This commit introduces domain separation for P256 scalar sampling via the salt argument for hkdf_extract, thereby addressing #12. In addition random_scalar will now panic if provided insufficient random bytes.

I have also introduced domain separation constants at all the call sites of random_scalar.