2022-08-26 22:26:53 +02:00
|
|
|
/*
|
|
|
|
Package x25519 provides Diffie-Hellman functions as specified in RFC-7748.
|
|
|
|
|
|
|
|
Validation of public keys.
|
|
|
|
|
|
|
|
The Diffie-Hellman function, as described in RFC-7748 [1], works for any
|
|
|
|
public key. However, if a different protocol requires contributory
|
|
|
|
behaviour [2,3], then the public keys must be validated against low-order
|
|
|
|
points [3,4]. To do that, the Shared function performs this validation
|
|
|
|
internally and returns false when the public key is invalid (i.e., it
|
|
|
|
is a low-order point).
|
|
|
|
|
|
|
|
References:
|
2023-12-13 14:29:02 +01:00
|
|
|
- [1] RFC7748 by Langley, Hamburg, Turner (https://rfc-editor.org/rfc/rfc7748.txt)
|
|
|
|
- [2] Curve25519 by Bernstein (https://cr.yp.to/ecdh.html)
|
|
|
|
- [3] Bernstein (https://cr.yp.to/ecdh.html#validate)
|
|
|
|
- [4] Cremers&Jackson (https://eprint.iacr.org/2019/526)
|
2022-08-26 22:26:53 +02:00
|
|
|
*/
|
|
|
|
package x25519
|