floodyberry / ed25519-donna

Implementations of a fast Elliptic-curve Digital Signature Algorithm
169 stars 47 forks source link

Malleability #13

Closed ghost closed 10 years ago

ghost commented 10 years ago

floodberry,

I can't thank you enough for this code! It's so fast and even easy enough for a noob like me to use!

I noticed that ref10 omitted the check for Sϵ{0,1...l-1}. I also happily noticed that in the fuzz section, ref10 has to be imported. Since it's reasonable to assume that you did not use ref10, is it reasonable to assume that you did not omit that check?

Also, is this written from scratch against the authors' paper describing the conditions for EdDSA? http://ed25519.cr.yp.to/ed25519-20110926.pdf

Thank you so very much for this lib floodberry!

floodyberry commented 10 years ago

My implementation is based on amd64-51/64, so I do not (currently) have any malleability checks.

ghost commented 10 years ago

Perfect! Thank you floodberry!

Can't thank you enough!