Frank Denis 7411be3c9e
std.crypto.edwards25519: add a rejectLowOrder() function (#13668)
Does what the name says: rejects generators of low-order groups.

`clearCofactor()` was previously used to do it, but for e.g.
cofactored signature verification, we don't need the result of an
actual multiplication. Only check that we didn't end up with a
low-order point, which is a faster operation.
2022-11-28 00:34:13 +01:00
..
2022-11-15 23:23:27 +02:00
2022-11-18 19:22:42 +00:00
2022-10-30 01:09:31 -07:00
2022-10-06 21:22:20 +03:00
2022-11-27 02:07:49 -05:00
2022-11-27 01:46:06 -05:00
2022-11-04 00:09:27 +03:30
2022-11-13 17:36:56 +02:00
2022-08-23 21:11:02 -07:00
2022-09-11 23:18:43 -04:00
2022-11-26 22:06:15 +02:00
2022-11-12 09:40:40 +01:00
2022-11-07 02:46:19 +01:00
2022-11-04 00:09:27 +03:30
2022-11-23 19:17:58 +01:00
2022-11-26 22:06:15 +02:00
2022-11-04 00:09:27 +03:30
2022-11-18 19:22:42 +00:00