risc0-curve25519-dalek-source/ed25519-dalek/src
mrwulf f17cbd1a19 Aeneas-compat: single-call sha512_hash3 oracle (sha2-0.10 stack)
This fork's sha2-0.10 Sha512 type alias cannot be declared opaque by the
extractor (generic-array expansion), so the three stateful hasher wrappers
collapse into one monomorphic sha512_hash3(r, a, m) -> [u8; 64] whose
signature carries no foreign types. Semantically Sha512 over r || a || m —
exactly the H(R || A || M) the verification equation hashes. Extraction
builds with --no-default-features (the no-std From<InternalError> branch
uses Error::new, avoiding the boxed dyn-Error source path).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-04 22:11:30 +02:00
..
batch.rs Fix new nightly redundant import lint warns (#638) 2024-02-29 18:56:52 -07:00
constants.rs Workspace ed25519 under ed25519-dalek 2023-06-27 04:04:09 +00:00
context.rs Address Clippy lints (#543) 2023-08-27 12:47:12 -06:00
errors.rs Workspace ed25519 under ed25519-dalek 2023-06-27 04:04:09 +00:00
hazmat.rs Address Clippy lints (#543) 2023-08-27 12:47:12 -06:00
lib.rs Indicate that the rand_core feature is required (#641) 2024-03-16 07:43:25 -06:00
signature.rs Aeneas-compat: check_scalar via explicit ell-compare + from_bytes_mod_order 2026-07-04 19:48:35 +02:00
signing.rs Fix a minor typo in signing.rs (#649) 2024-04-13 19:37:33 -06:00
verifying.rs Aeneas-compat: single-call sha512_hash3 oracle (sha2-0.10 stack) 2026-07-04 22:11:30 +02:00