telackey/sodium-javascript
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

ge25519_from_uniform fix

Browse Source
This commit is contained in:
Christophe Diederichs 2022-11-18 12:18:32 +00:00
parent bfa677d67f
commit 7cad891d0e
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
fe25519_25.js
View File

@ -2544,19 +2544,19 @@ function ge25519_from_uniform (s, r) {
var was_square = 0 var was_square = 0
var x_sign = 0 var x_sign = 0
s.set(r, 32) s.set(r.subarray(0, 32))
x_sign = s[31] >> 7 x_sign = s[31] >> 7
s[31] &= 0x7f s[31] &= 0x7f
fe25519_frombytes(r_fe, s) fe25519_frombytes(r_fe, s)
ge25519_elligator2(x, y, r_fe, was_square) ge25519_elligator2(x, y, r_fe, was_square)
ge25519_mont_to_ed(p3[0], p3[2], x, y) ge25519_mont_to_ed(p3[0], p3[1], x, y)
fe25519_neg(negxed, p3[0]) fe25519_neg(negxed, p3[0])
fe25519_cmov(p3[0], negxed, fe25519_isnegative(p3[0]) ^ x_sign) fe25519_cmov(p3[0], negxed, fe25519_isnegative(p3[0]) ^ x_sign)
fe25519_1(p3[2]) fe25519_1(p3[2])
fe25519_mul(p3[3], p3[0], p3[2]) fe25519_mul(p3[3], p3[0], p3[1])
ge25519_clear_cofactor(p3) ge25519_clear_cofactor(p3)
ge25519_p3_tobytes(s, p3) ge25519_p3_tobytes(s, p3)
} }