ISO/IEC 14888-3:2018/Amd 1
EdDSA, the new clause

ISO/IEC 14888-3:2018/Amd 1 6.13.4.5: The assignment binds the key into the hash

What does 6.13.4.5 require?

Compute the assignment with the exact field order and the exact domain octet, and reduce modulo the order of the base point. Record the field order in the design note, because a transposition produces signatures that verify locally and fail everywhere else.

Maintained by Gerard Blokdyk

Other controls in EdDSA, the new clause

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.