ISO/IEC 14888-3:2018/Amd 1
EdDSA, the new clause

ISO/IEC 14888-3:2018/Amd 1 6.13.5.4: The assignment is recomputed, not trusted

What does 6.13.5.4 require?

Recompute the assignment with the same field order, the same domain octet and the same length and endianness as the signer, and reduce it modulo the order of the base point. Record the field order in the design note and test it against a second implementation.

Maintained by Gerard Blokdyk

Other controls in EdDSA, the new clause

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.