serai/crypto/ed448
Luke Parker ee6316b26b
Use a Group::random which doesn't have a known DL
While Group::random shouldn't be used instead of a hash to curve, anyone 
who did would've previously been insecure and now isn't.

Could've done a recover_x and a raw Point construction, followed by a 
cofactor mul, to avoid the serialization, yet the serialization ensures 
full validity under the standard from_bytes function. THis also doesn't 
need to be micro-optimized.
2022-08-29 13:02:20 -04:00
..
src Use a Group::random which doesn't have a known DL 2022-08-29 13:02:20 -04:00
Cargo.toml FROST Ed448 (#107) 2022-08-29 02:32:59 -05:00
LICENSE FROST Ed448 (#107) 2022-08-29 02:32:59 -05:00
README.md FROST Ed448 (#107) 2022-08-29 02:32:59 -05:00

Minimal Ed448

Inefficient, barebones implementation of Ed448 bound to the ff/group API, rejecting torsion to achieve a PrimeGroup definition. This likely should not be used and was only done so another library under Serai could confirm its completion. It is minimally tested, yet should be correct for what it has. Multiple functions remain unimplemented.

constant time and no_std.