26 Apr
2016
26 Apr
'16
5:06 a.m.
Nikos Mavrogiannopoulos n.mavrogiannopoulos@gmail.com writes:
It would make sense to document the version of nettle after which this behavior is followed,
Makes sense, I guess. Note that current behaviour is quite explicitly undocumented, "The output value is defined only when the input @var{p} is a string produced by @code{curve25519_mul_g}", and that function shouldn't produce any strings with the top bit set.
It would also be relevant to compare with NaCl's crypto_scalar_mult_base function, does anyone on the list know how it behaves in this respect?
Regards, /Niels
--
Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26.
Internet email is subject to wholesale government surveillance.