nisse@lysator.liu.se (Niels Möller) writes:
And a low-level function, possibly like
void _eddsa_sign (const struct ecc_curve *ecc, const struct nettle_hash *H, const uint8_t *pub, void *k1, const mp_limb_t *k2, size_t length, const uint8_t *msg, uint8_t *signature);
Something very similar to this is now implemented, including a couple of tests. We also need a helper function to expand a private key, generating the three arguments pub, k1, and k2 above; currently there's code to do that in the test program, and it's a bit error prone. And then corresponding _eddsa_verify, and the higher-level more user-friendly functions.
Regards, /Niels