saymrwulf/risc0-curve25519-dalek-source
1
0
Fork 0
mirror of https://github.com/saymrwulf/risc0-curve25519-dalek-source.git synced 2026-09-07 20:30:39 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Avoid compressing R twice.

Browse source
This commit is contained in:
Isis Lovecruft 2018-07-12 21:47:52 +00:00
parent b8e42e9a7e
commit 9d58954578
Failed to extract signature
1 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
src/ed25519.rs
View file

@ -570,7 +570,7 @@ impl ExpandedSecretKey {
let mut hash: [u8; 64] = [0u8; 64]; let mut hash: [u8; 64] = [0u8; 64];
let mesg_digest: Scalar; let mesg_digest: Scalar;
let hram_digest: Scalar; let hram_digest: Scalar;
let r: EdwardsPoint; let r: CompressedEdwardsY;
let s: Scalar; let s: Scalar;
h.input(&self.nonce); h.input(&self.nonce);
@ -579,10 +579,10 @@ impl ExpandedSecretKey {
mesg_digest = Scalar::from_bytes_mod_order_wide(&hash); mesg_digest = Scalar::from_bytes_mod_order_wide(&hash);
r = &mesg_digest * &constants::ED25519_BASEPOINT_TABLE; r = (&mesg_digest * &constants::ED25519_BASEPOINT_TABLE).compress();
h = D::default(); h = D::default();
h.input(r.compress().as_bytes()); h.input(r.as_bytes());
h.input(public_key.as_bytes()); h.input(public_key.as_bytes());
h.input(&message); h.input(&message);
hash.copy_from_slice(h.fixed_result().as_slice()); hash.copy_from_slice(h.fixed_result().as_slice());
@ -591,7 +591,7 @@ impl ExpandedSecretKey {
s = &(&hram_digest * &self.key) + &mesg_digest; s = &(&hram_digest * &self.key) + &mesg_digest;
Signature{ r: r.compress(), s: s } Signature{ r: r, s: s }
} }
} }