On Fri, Aug 29, 2014 at 2:27 PM, Niels Möller nisse@lysator.liu.se wrote:
Things I'd like to do, besides optimizations:
- Switch from the plain Edwards curve to the twist used for Ed25519. Should be pretty a small change.
Done (but not yet pushed to the public repo). With only minor changes to the addition formulas, not yet using the new optimizations which become possible with this curve.
- Implement Ed25519 signatures.
This is the next thing to do, I think, before turning to optimizations. If anyone knows some eddsa25519 test vectors, that would be great. The paper doesn't include any.
I know that ligcrypt added eddsa support recently and they use the vectors from http://ed25519.cr.yp.to/python/sign.input
regards, Nikos