Comment

2017-12-13 10:24:13 +01:00 · 2017-12-13 10:24:13 +01:00 · 675149b9b8
commit 675149b9b8
parent a1d438c8ba
1 changed files with 5 additions and 0 deletions
--- a/src/libsodium/crypto_scalarmult/curve25519/ref10/x25519_ref10.c
+++ b/src/libsodium/crypto_scalarmult/curve25519/ref10/x25519_ref10.c
@ -8,6 +8,11 @@
 #include "utils.h"
 #include "x25519_ref10.h"

+/*
+ * Reject small order points early to mitigate the implications of
+ * unexpected optimizations that would affect the ref10 code.
+ * See https://eprint.iacr.org/2017/806.pdf for reference.
+ */
 static int
 has_small_order(const unsigned char s[32])
 {