Nikos Mavrogiannopoulos <[email protected]> writes:
> It would make sense to document the version of nettle after which this
> behavior is followed,
Makes sense, I guess. Note that current behaviour is quite explicitly
undocumented, "The output value is defined only when the input @var{p}
is a string produced by @code{curve25519_mul_g}", and that function
shouldn't produce any strings with the top bit set.
It would also be relevant to compare with NaCl's crypto_scalar_mult_base
function, does anyone on the list know how it behaves in this respect?
Regards,
/Niels
--
Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26.
Internet email is subject to wholesale government surveillance.
_______________________________________________
nettle-bugs mailing list
[email protected]
http://lists.lysator.liu.se/mailman/listinfo/nettle-bugs
