mirror of
https://github.com/saymrwulf/curve25519-dalek-source.git
synced 2026-09-07 20:50:39 +00:00
parent
93149bc071
commit
51f176007e
1 changed files with 2 additions and 2 deletions
|
|
@ -96,7 +96,7 @@ or form, safe.
|
||||||
The signatures produced by this library are malleable, as discussed in
|
The signatures produced by this library are malleable, as discussed in
|
||||||
[the original paper](https://ed25519.cr.yp.to/ed25519-20110926.pdf):
|
[the original paper](https://ed25519.cr.yp.to/ed25519-20110926.pdf):
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
We could eliminate the malleability property by multiplying by the curve
|
We could eliminate the malleability property by multiplying by the curve
|
||||||
cofactor, however, this would cause our implementation to *not* match the
|
cofactor, however, this would cause our implementation to *not* match the
|
||||||
|
|
@ -111,7 +111,7 @@ In short, if malleable signatures are bad for your protocol, don't use them.
|
||||||
Consider using a curve25519-based Verifiable Random Function (VRF), such as
|
Consider using a curve25519-based Verifiable Random Function (VRF), such as
|
||||||
[Trevor Perrin's VXEdDSA](https://www.whispersystems.org/docs/specifications/xeddsa/),
|
[Trevor Perrin's VXEdDSA](https://www.whispersystems.org/docs/specifications/xeddsa/),
|
||||||
instead. We
|
instead. We
|
||||||
[plan](https://github.com/isislovecruft/curve25519-dalek/issues/9) to
|
[plan](https://github.com/dalek-cryptography/curve25519-dalek/issues/9) to
|
||||||
eventually support VXEdDSA in curve25519-dalek.
|
eventually support VXEdDSA in curve25519-dalek.
|
||||||
|
|
||||||
# Installation
|
# Installation
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue