Frank Denis 7411be3c9e

std.crypto.edwards25519: add a rejectLowOrder() function (#13668) ...

Does what the name says: rejects generators of low-order groups.

`clearCofactor()` was previously used to do it, but for e.g.
cofactored signature verification, we don't need the result of an
actual multiplication. Only check that we didn't end up with a
low-order point, which is a faster operation.

2022-11-28 00:34:13 +01:00

..

curve25519.zig

crypto/x25519: implement clearCofactor() (#11355)

2022-04-07 10:46:23 +02:00

ed25519.zig

std.crypto.edwards25519: add a rejectLowOrder() function (#13668)

2022-11-28 00:34:13 +01:00

edwards25519.zig

std.crypto.edwards25519: add a rejectLowOrder() function (#13668)

2022-11-28 00:34:13 +01:00

field.zig

std.crypto.25519.field: avoid excessive inlining

2022-06-27 19:11:55 -07:00

ristretto255.zig

remove redundant license headers from zig standard library

2021-08-24 12:25:09 -07:00

scalar.zig

std/crypto/{25519,pcurves}: make the scalar field order public (#11955)

2022-06-29 07:44:43 +02:00

x25519.zig

Revamp the ed25519 API (#13309)

2022-10-27 19:07:42 +02:00