You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Ed25519 signatures can be deterministic, but they can also be randomized to defend against some side channel attacks. In particular, @zssz pointed out that per Apple docs the iOS implementation of Ed25519 signatures uses randomization. So there should be some note on the test vectors to point out that if the signature implementation uses randomization, the bytes of the signature may not match the test vectors, and that's fine (as long as the signature still verifies).
The text was updated successfully, but these errors were encountered:
Ed25519 signatures can be deterministic, but they can also be randomized to defend against some side channel attacks. In particular, @zssz pointed out that per Apple docs the iOS implementation of Ed25519 signatures uses randomization. So there should be some note on the test vectors to point out that if the signature implementation uses randomization, the bytes of the signature may not match the test vectors, and that's fine (as long as the signature still verifies).
The text was updated successfully, but these errors were encountered: