Hash to curve implementation

Open kgncan opened this issue 6 years ago • 1 comments

Good work implementing this, and with sensible defaults.

One thing, I briefly looked at the implementation, and I'm not sure H' satisfies the requirements in the draft (which talks about using hash to curve algorithms from https://tools.ietf.org/html/draft-irtf-cfrg-hash-to-curve-04)

See: https://github.com/GeorgeLyon/Opaque/blob/9228f5ce3e9105794e9e6250ad0bca4947d8cb07/Sources/CLibOpaque/opaque.c#L202

This stack exchange answer implies that this might not be sufficient?

Nov 04 '19 13:11 kgncan

Do you think using 512 bits of output for the hash could solve the issue? Also, wouldn't Universal Hashing require storing the random parameters somewhere?

Aug 21 '20 17:08 louisabraham