benma

https://github.com/agl/ed25519/blob/278e1ec8e8a6e017cd07577924d6766039146ced/extra25519/extra25519.go#L92 It is hard to understand how the paper relates to this function for non-experts. You wrote a nice blog post explaining it in https://www.imperialviolet.org/2013/12/25/elligator.html, which I found through googling...

Create annotated tags for releases

2

Hi It would be great if you tagged the current HEAD with v1.0.0, and in the future, occasionally bump the version and make new tags with new releases. I suggest...

How do I add two group elements?

1

If I have two `edwards25519.ExtendedGroupElement`, how do I add them on the curve? I don't see a function for it, but it would be very useful. Here is an implementation...

Part of https://github.com/agl/ed25519/issues/14

Part of https://github.com/agl/ed25519/issues/14.

https://github.com/agl/ed25519/blob/278e1ec8e8a6e017cd07577924d6766039146ced/edwards25519/edwards25519.go#L13-L16 Please expand the "..." and document where does exponents (26, 51, ...) come from. Please document a bit what the constants mean here: https://github.com/agl/ed25519/blob/278e1ec8e8a6e017cd07577924d6766039146ced/edwards25519/const.go

We want to update the btcd dep, but it heavily refactored the btcec package - it now does not use big.Int anymore and there seems to be no way to...

This helps to identify the wallet and is especially useful when using the optional passphrase. Builds on https://github.com/digitalbitbox/bitbox-wallet-app/pull/1691