ISO/IEC 14888-3:2018/Amd 1
EdDSA, the new clause

ISO/IEC 14888-3:2018/Amd 1 6.13.4.2: The pre-signature is one scalar multiple

What does 6.13.4.2 require?

Compute the pre-signature with the base point of the set in use, and record whether the implementation reduces the scalar first. Both routes are permitted, so the record should say which one the code takes, and the test vectors should agree with it.

Maintained by Gerard Blokdyk

Other controls in EdDSA, the new clause

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.