zig/lib/std/crypto/25519
Frank Denis 7411be3c9e
std.crypto.edwards25519: add a rejectLowOrder() function (#13668)
Does what the name says: rejects generators of low-order groups.

`clearCofactor()` was previously used to do it, but for e.g.
cofactored signature verification, we don't need the result of an
actual multiplication. Only check that we didn't end up with a
low-order point, which is a faster operation.
2022-11-28 00:34:13 +01:00
..
curve25519.zig crypto/x25519: implement clearCofactor() (#11355) 2022-04-07 10:46:23 +02:00
ed25519.zig std.crypto.edwards25519: add a rejectLowOrder() function (#13668) 2022-11-28 00:34:13 +01:00
edwards25519.zig std.crypto.edwards25519: add a rejectLowOrder() function (#13668) 2022-11-28 00:34:13 +01:00
field.zig std.crypto.25519.field: avoid excessive inlining 2022-06-27 19:11:55 -07:00
ristretto255.zig
scalar.zig std/crypto/{25519,pcurves}: make the scalar field order public (#11955) 2022-06-29 07:44:43 +02:00
x25519.zig Revamp the ed25519 API (#13309) 2022-10-27 19:07:42 +02:00