Frank Denis feb806a212

std.crypto.ed25519 incremental signatures: hash the fallback noise (#13643) ...

If the noise parameter was null, we didn't use any noise at all.

We unconditionally generated random noise (`noise2`) but didn't use it.

Spotted by @cryptocode, thanks!

2022-11-24 12:13:37 +01:00

..

curve25519.zig

crypto/x25519: implement clearCofactor() (#11355)

2022-04-07 10:46:23 +02:00

ed25519.zig

std.crypto.ed25519 incremental signatures: hash the fallback noise (#13643)

2022-11-24 12:13:37 +01:00

edwards25519.zig

std: remove deprecated API for the upcoming release

2022-09-16 14:46:53 -04:00

field.zig

std.crypto.25519.field: avoid excessive inlining

2022-06-27 19:11:55 -07:00

ristretto255.zig

remove redundant license headers from zig standard library

2021-08-24 12:25:09 -07:00

scalar.zig

std/crypto/{25519,pcurves}: make the scalar field order public (#11955)

2022-06-29 07:44:43 +02:00

x25519.zig

Revamp the ed25519 API (#13309)

2022-10-27 19:07:42 +02:00