-
Notifications
You must be signed in to change notification settings - Fork 152
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Adding support for Ed448 digital signatures. #84
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Generally good, but I have some correctness worries which probably I can be convinced are fine
H := sha3.NewShake256() | ||
_, _ = H.Write(k.private[:]) | ||
_, _ = H.Read(h[:]) | ||
clamp(h[:Size]) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Is this used anywhere? I'm a bit confused about which parts of the private key in the keypair are which, so it's a bit hard for me to see that this is right.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The first part is the scalar called s
in the RFC and used blinding in the Schnorr signature. The second part is called prefix
in the RFC and is used to derive the nonce. I agree that a comment would be nice.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
First batch of comments. More to come.
Based on your comments on this PR, I am preparing another PR for ed448 that is based on the goldilocks package. So I will close this for now. |
Includes the digital signature Ed448.