telackey/sodium-javascript
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix bugs in crypto_sign

Browse Source
This commit is contained in:
Christophe Diederichs 2020-06-16 14:16:50 +02:00
parent 7e5ea3b5ed
commit 7141f00ff0
1 changed files with 6 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
crypto_sign.js
View File

@ -6,6 +6,7 @@ const {
sel25519, pack25519, sel25519, pack25519,
inv25519, unpack25519 inv25519, unpack25519
} = require('./ed25519') } = require('./ed25519')
const { randombytes } = require('./randombytes')
const crypto_sign_BYTES = 64, const crypto_sign_BYTES = 64,
crypto_sign_PUBLICKEYBYTES = 32, crypto_sign_PUBLICKEYBYTES = 32,
@ -108,8 +109,8 @@ function scalarbase(p, s) {
} }
function crypto_sign_keypair(pk, sk, seeded) { function crypto_sign_keypair(pk, sk, seeded) {
check(pk, sodium.crypto_sign_PUBLICKEYBYTES) check(pk, crypto_sign_PUBLICKEYBYTES)
check(sk, sodium.crypto_sign_SECRETKEYBYTES) check(sk, crypto_sign_SECRETKEYBYTES)
var d = new Uint8Array(64); var d = new Uint8Array(64);
var p = [gf(), gf(), gf(), gf()]; var p = [gf(), gf(), gf(), gf()];
@ -129,9 +130,9 @@ function crypto_sign_keypair(pk, sk, seeded) {
} }
function crypto_sign_seed_keypair (pk, sk, seed) { function crypto_sign_seed_keypair (pk, sk, seed) {
check(seed, sodium.crypto_sign_SEEDBYTES) check(seed, crypto_sign_SEEDBYTES)
seed.copy(sk) seed.copy(sk)
crypto_sign_keypair(pk, sk, true) return crypto_sign_keypair(pk, sk, true)
} }
var L = new Float64Array([0xed, 0xd3, 0xf5, 0x5c, 0x1a, 0x63, 0x12, 0x58, 0xd6, 0x9c, 0xf7, 0xa2, 0xde, 0xf9, 0xde, 0x14, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0x10]); var L = new Float64Array([0xed, 0xd3, 0xf5, 0x5c, 0x1a, 0x63, 0x12, 0x58, 0xd6, 0x9c, 0xf7, 0xa2, 0xde, 0xf9, 0xde, 0x14, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0x10]);
@ -206,6 +207,7 @@ function crypto_sign(sm, m, sk) {
} }
modL(sm.subarray(32), x); modL(sm.subarray(32), x);
return smlen
} }
function crypto_sign_detached(sig, m, sk) { function crypto_sign_detached(sig, m, sk) {