Alex Xiong 9638ab40a5 Made ExpandedSecretKey private to avoid signing key oracle (#205) ... This fix eliminates a scenario where a user misuses the `ExpandedSecretKey` API in a way that leaks the user's secret key. In short, if a user sends `ExpandedSecretKey::sign(sk, msg, pk1)` followed by `ExpandedSecretKey::sign(sk, msg, pk2)`, where `pk1 != pk2`, a passive adversary [can easily][0] derive `sk`. To mitigate this, we remove the API entirely. [0]: https://github.com/MystenLabs/ed25519-unsafe-libs		2022-10-15 15:04:03 -04:00
..
ed25519.rs	Made ExpandedSecretKey private to avoid signing key oracle (#205)	2022-10-15 15:04:03 -04:00