From 055e0ae82c8a478ab3eb8f5608c34dc718304275 Mon Sep 17 00:00:00 2001
From: Frank Denis <github@pureftpd.org>
Date: Mon, 10 Dec 2018 21:03:52 +0100
Subject: [PATCH] Even in non-deterministic EdDSA, the actual secret key is
 H(sk).

---
 src/libsodium/crypto_sign/ed25519/ref10/sign.c | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/src/libsodium/crypto_sign/ed25519/ref10/sign.c b/src/libsodium/crypto_sign/ed25519/ref10/sign.c
index 4df90bdd..3e34e170 100644
--- a/src/libsodium/crypto_sign/ed25519/ref10/sign.c
+++ b/src/libsodium/crypto_sign/ed25519/ref10/sign.c
@@ -74,11 +74,10 @@ _crypto_sign_ed25519_detached(unsigned char *sig, unsigned long long *siglen_p,
 
     _crypto_sign_ed25519_ref10_hinit(&hs, prehashed);
 
+    crypto_hash_sha512(az, sk, 32);
 #ifdef ED25519_NONDETERMINISTIC
-    memcpy(az, sk, 32);
     _crypto_sign_ed25519_synthetic_r_hv(&hs, nonce, az);
 #else
-    crypto_hash_sha512(az, sk, 32);
     crypto_hash_sha512_update(&hs, az + 32, 32);
 #endif