3 Commits

Author	SHA1	Message	Date
George Kadianakis	4ad4467fa1	Don't double hash the ed25519 blind key parameter. ... We used to do: h = H(BLIND_STRING | H(A | s | B | N ) when we should be doing: h = H(BLIND_STRING | A | s | B | N) Change the logic so that hs_common.c does the hashing, and our ed25519 libraries just receive the hashed parameter ready-made. That's easier than doing the hashing on the ed25519 libraries, since that means we would have to pass them a variable-length param (depending on whether 's' is set or not). Also fix the ed25519 test vectors since they were also double hashing.	2017-08-08 20:29:34 -04:00
Nick Mathewson	9b43a4a122	Add comments to ed25519_vectors.inc	2014-09-25 15:08:32 -04:00
Nick Mathewson	7ca470e13c	Add a reference implementation of our ed25519 modifications ... Also, use it to generate test vectors, and add those test vectors to test_crypto.c This is based on ed25519.py from the ed25519 webpage; the kludgy hacks are my own.	2014-09-25 15:08:32 -04:00