Frank Denis 93e11b824a
crypto/x25519: implement clearCofactor() (#11355)
This is the x25519 counterpart to `edwards25519.clearCofactor()`.

It is useful to check for low-order points in protocols where it matters and where clamping cannot work, such as PAKEs.
2022-04-07 10:46:23 +02:00
..
2022-01-28 16:23:47 -07:00
2022-01-28 16:23:47 -07:00
2022-01-28 16:23:47 -07:00
2021-05-08 15:15:30 +03:00