Timeline for When working in a subgroup of EC in EdDSA (especially Ed255190), how is it OK to use operations different from that of the main group?
Current License: CC BY-SA 4.0
5 events
when toggle format | what | by | license | comment | |
---|---|---|---|---|---|
Sep 13, 2022 at 7:42 | comment | added | user93353 | yes, I got that from your reply itself - your reply was very clear. | |
Sep 13, 2022 at 7:22 | comment | added | fgrieu♦ | @user93353: yes. The problem is that this optimization can break down when $P$ is extracted from an alleged signature, and is not actually equal to something of the form $[j]G$ where $G$ is the generator point, and as should be verified somehow before making said optimization. | |
Sep 13, 2022 at 0:40 | vote | accept | user93353 | ||
Sep 12, 2022 at 4:39 | comment | added | user93353 | Very ambigous statement by the author! But yeah, reducing the scalar by $\bmod q$ is a valid optimization. | |
Sep 12, 2022 at 4:30 | history | answered | fgrieu♦ | CC BY-SA 4.0 |