curve25519-dalek

curve25519-dalek copied to clipboard

Exposing the field element API

26

I'm personally interested in implementing a hash to curve (an existing one, not a new one), which I understand isn't something that comes up often (lack of other issues with...

kayabaNerve

Expose function for directly encoding bytes to curve, without hashing.

1

This PR: * Adds a `bytes_to_curve` method that allows one to encode arbitrary bytes to the Edwards curve. This function is identical to `hash_from_bytes`, without the hashing. * For convinience,...

AmitPr

Update Dependencies

2

In particular, we're having problems with dependency trees in the reference implementation for the wasi-crypto specification.

npmccallum

feat: remove limitation on zeroize

2

Helps with compatibility with recent versions of other crypto crates

poliorcetics

Increase MSRV to allow for Zeroize > 1.4

6

Hi, is there any chance we can increase the minimum supported rust version and zeroize to > 1.4? It conflicts with a lot of other crates. Thanks! Based on what...

hariria

allows basepoint tables to be excluded to reduce flash usage on embedded devices. this should have no impact on most users, but will require adding `features = [ "basepoint_tables" ]`...

ryankurte

hi folks, thanks for all your effort in building / maintaining such excellent cryptographic libraries ^_^ i'm working on replacing a bunch of c cryptography APIs with dalek via FFI,...

ryankurte

The function `EdwardsPoint::hash_from_bytes()` is described as "performing hashing to the group" and explicitly references draft-irtf-cfrg-hash-to-curve: https://github.com/dalek-cryptography/curve25519-dalek/blob/8abb22bcafe30ac2dbad372d0444fdba9e63bc0e/src/edwards.rs#L529-L532 This is a rather misleading description because: - This function does _not_ implement the...

pornin

Batch double-and-compress (on ristretto255) fails on the identity point

1

`RistrettoPoint::double_and_compress_batch()` may fail if one of the input points is the Ristretto identity. The function computes, for each input point, the values `e`, `f`, `g`, and `h` (in a `BatchCompressState`...

pornin

This makes `FieldElement::batch_invert()` able to process inputs of value zero (the "inverse" of zero is formally defined to be zero; this is usually the most useful value to return in...

pornin