You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
So I want to do a point multiplication on a Ed25519 curve and I used the function in the title because that's the only one that accepts a specific point input. I set my scalar to a and my point to A and b is a scalar of zeros. From my understanding of the b*B part of the equation should result with the point [0,1]. When this is added to my a*A, it should not have any effect on the point yet I'm seeing a a difference of 0x80 in the last byte of the encoded result when compared to another known good source.
On a side note, there's a ed25519.py library that handles a case for a zero scalar input which automatically returns [0,1] and I couldn't tell if this was happening in the above function. It makes sense the function wouldn't handle this edge case scenario of a zero scalar input because that doesn't make sense in the verify portion of EdDSA, yet I'm trying to leverage this function to perform a point multiplication with a scalar and a specified point.
Any help with this issue would be greatly appreciated. My understanding of ed25519 curves is minimal, but I'm trying to perform a Diffie-Hellman key exchange using the Ed25519 curve.
The text was updated successfully, but these errors were encountered:
So I want to do a point multiplication on a Ed25519 curve and I used the function in the title because that's the only one that accepts a specific point input. I set my scalar to
a
and my point toA
andb
is a scalar of zeros. From my understanding of theb*B
part of the equation should result with the point [0,1]. When this is added to mya*A
, it should not have any effect on the point yet I'm seeing a a difference of 0x80 in the last byte of the encoded result when compared to another known good source.On a side note, there's a ed25519.py library that handles a case for a zero scalar input which automatically returns [0,1] and I couldn't tell if this was happening in the above function. It makes sense the function wouldn't handle this edge case scenario of a zero scalar input because that doesn't make sense in the verify portion of EdDSA, yet I'm trying to leverage this function to perform a point multiplication with a scalar and a specified point.
Any help with this issue would be greatly appreciated. My understanding of ed25519 curves is minimal, but I'm trying to perform a Diffie-Hellman key exchange using the Ed25519 curve.
The text was updated successfully, but these errors were encountered: