serai/crypto/ed448
Luke Parker 93f7afec8b
3.5.2 Add more tests to ff-group-tests
The audit recommends checking failure cases for from_bytes,
from_bytes_unechecked, and from_repr. This isn't feasible.

from_bytes is allowed to have non-canonical values. [0xff; 32] may accordingly
be a valid point for non-SEC1-encoded curves.

from_bytes_unchecked doesn't have a defined failure mode, and by name,
unchecked, shouldn't necessarily fail. The audit acknowledges the tests should
test for whatever result is 'appropriate', yet any result which isn't a failure
on a valid element is appropriate.

from_repr must be canonical, yet for a binary field of 2^n where n % 8 == 0, a
[0xff; n / 8] repr would be valid.
2023-02-24 06:03:56 -05:00
..
src 3.5.2 Add more tests to ff-group-tests 2023-02-24 06:03:56 -05:00
Cargo.toml Add test vectors for Ciphersuite::hash_to_F 2022-12-25 02:50:10 -05:00
LICENSE FROST Ed448 (#107) 2022-08-29 02:32:59 -05:00
README.md Re-organize testing strategy and document Ciphersuite::hash_to_F. 2022-12-24 17:08:22 -05:00

Minimal Ed448

Inefficient, barebones implementation of Ed448 bound to the ff/group API, rejecting torsion to achieve a PrimeGroup definition. This likely should not be used and was only done so another library under Serai could confirm its completion. It is minimally tested, yet should be correct for what it has. The functions it doesn't have are marked unimplemented!(). This has not undergone auditing.

constant time and no_std.