mirror of
https://github.com/saymrwulf/curve25519-dalek-source.git
synced 2026-09-04 20:24:10 +00:00
parent
93149bc071
commit
51f176007e
1 changed files with 2 additions and 2 deletions
|
|
@ -96,7 +96,7 @@ or form, safe.
|
|||
The signatures produced by this library are malleable, as discussed in
|
||||
[the original paper](https://ed25519.cr.yp.to/ed25519-20110926.pdf):
|
||||
|
||||

|
||||

|
||||
|
||||
We could eliminate the malleability property by multiplying by the curve
|
||||
cofactor, however, this would cause our implementation to *not* match the
|
||||
|
|
@ -111,7 +111,7 @@ In short, if malleable signatures are bad for your protocol, don't use them.
|
|||
Consider using a curve25519-based Verifiable Random Function (VRF), such as
|
||||
[Trevor Perrin's VXEdDSA](https://www.whispersystems.org/docs/specifications/xeddsa/),
|
||||
instead. We
|
||||
[plan](https://github.com/isislovecruft/curve25519-dalek/issues/9) to
|
||||
[plan](https://github.com/dalek-cryptography/curve25519-dalek/issues/9) to
|
||||
eventually support VXEdDSA in curve25519-dalek.
|
||||
|
||||
# Installation
|
||||
|
|
|
|||
Loading…
Reference in a new issue