CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/09/15 18:43:00
Modified files:
usr.bin/ssh : crypto_api.h ed25519-openssl.c ed25519.c
ssh-ed25519-sk.c ssh-ed25519.c
ssh-mldsa-eddsa.c
Log message:
switch from SUPERCOP ed25519 to libsodium
The libsodium implementation includes a number of strictness and
malleability checks over the original reference implementation we
have used to this point.
libsodium also offers a more traditional "detached" signature
verification API (SUPERCOP required the signature to be contiguous
with the signed data). Switch to this and avoid a bunch of fiddly
code.
ok markus, deraadt