Michael Lodder
Michael Lodder
Signed-off-by: Michael Lodder
Is there any reason why we can't use `fe`, `modulus`, and `q` directly? For example, I want to implement the BBS+ signature scheme using this library and it involves operations...
After inspection of the code, I found some [examples](https://github.com/decentralized-identity/bbs-signature/blob/3e69a8b16fd7788993e9d3a8849f311ade47fc5e/tooling/message-generators/src/main.rs#L117) where a random scalar is chosen then multiplied by a point. While not inherently insecure, there is the potential side channel...
This updates the dependencies to secure versions since `crypto_box` 0.6 has a vulnerability. This also updates from using Chacha12 to Chacha20 which has higher security margins and performance difference is...
Adds hash_to_curve for Edwards points according to [RFC9390](https://datatracker.ietf.org/doc/rfc9380/)
Signed-off-by: Michael Lodder Not sure if this is what you want but it allows me to compile other C libraries for wasm32 now.
BLS12-381 and BLS12-377 both need to be updated to be constant. Side benefit is compilation to ARM and AMD