Frank Denis 7411be3c9e
std.crypto.edwards25519: add a rejectLowOrder() function (#13668)
Does what the name says: rejects generators of low-order groups.

`clearCofactor()` was previously used to do it, but for e.g.
cofactored signature verification, we don't need the result of an
actual multiplication. Only check that we didn't end up with a
low-order point, which is a faster operation.
2022-11-28 00:34:13 +01:00
..
2022-10-18 10:18:09 -07:00
2022-08-04 18:02:01 -07:00
2022-08-04 18:09:10 -07:00
2022-11-04 00:09:27 +03:30
2022-11-04 00:09:27 +03:30