Expand description
RFC 8032 Ed25519 signatures.
Points use extended twisted Edwards coordinates (X : Y : Z : T) with
a = -1. Because d is a non-square in GF(2^255-19), the
add-2008-hwcd-3 formula is complete: it is correct for every input pair,
including doubling and the identity. That is what lets scalar multiplication
be a single branch-free loop with no exceptional cases to special-case, and
no timing signal from the shape of the scalar.
Structsยง
- Ed25519
- RFC 8032 Ed25519 (PureEdDSA over Curve25519 with SHA-512).
- Ed25519
Key - A signing key with its public key already derived.
- Ed25519
Verify Key - A public key with its point already recovered.
- Point
- A point in extended twisted Edwards coordinates.