Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Note that implementations might not match the test vectors if Ed25519 randomization is used. #62

Open
hdevalence opened this issue Apr 16, 2020 · 0 comments

Comments

@hdevalence
Copy link
Collaborator

Ed25519 signatures can be deterministic, but they can also be randomized to defend against some side channel attacks. In particular, @zssz pointed out that per Apple docs the iOS implementation of Ed25519 signatures uses randomization. So there should be some note on the test vectors to point out that if the signature implementation uses randomization, the bytes of the signature may not match the test vectors, and that's fine (as long as the signature still verifies).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant