jedisct1 / libsodium

A modern, portable, easy to use crypto library.
https://libsodium.org
Other
12.27k stars 1.75k forks source link

crypto_core_ed25519_from_uniform exposes the *direct* map #941

Closed LoupVaillant closed 4 years ago

LoupVaillant commented 4 years ago

From the manual

This function directly exposes the inverse Elligator 2 map

The original paper however says otherwise:

Is this a typo, or is there a consensus about the paper being "wrong"?

(Edit: it wouldn't be the first time usage diverges from the original paper. Montgomery curve points for instance now tend to be called (u, v), while the original papers used (x, y).)