Add crypto_core_{ed25519,ristretto255}_scalar_is_canonical()

dist-build/emscripten-symbols.def

@@ -166,6 +166,7 @@ _crypto_core_ed25519_random 0 1
 _crypto_core_ed25519_scalar_add 0 1
 _crypto_core_ed25519_scalar_complement 0 1
 _crypto_core_ed25519_scalar_invert 0 1
+_crypto_core_ed25519_scalar_is_canonical 0 1
 _crypto_core_ed25519_scalar_mul 0 1
 _crypto_core_ed25519_scalar_negate 0 1
 _crypto_core_ed25519_scalar_random 0 1
@@ -194,6 +195,7 @@ _crypto_core_ristretto255_random 0 1
 _crypto_core_ristretto255_scalar_add 0 1
 _crypto_core_ristretto255_scalar_complement 0 1
 _crypto_core_ristretto255_scalar_invert 0 1
+_crypto_core_ristretto255_scalar_is_canonical 0 1
 _crypto_core_ristretto255_scalar_mul 0 1
 _crypto_core_ristretto255_scalar_negate 0 1
 _crypto_core_ristretto255_scalar_random 0 1

src/libsodium/crypto_core/ed25519/core_ed25519.c

@@ -271,6 +271,12 @@ crypto_core_ed25519_scalar_reduce(unsigned char *r,
     sodium_memzero(t, sizeof t);
 }
 
+int
+crypto_core_ed25519_scalar_is_canonical(const unsigned char *s)
+{
+    return sc25519_is_canonical(s);
+}
+
 size_t
 crypto_core_ed25519_bytes(void)
 {

src/libsodium/crypto_core/ed25519/core_ristretto255.c

@@ -131,6 +131,12 @@ crypto_core_ristretto255_scalar_reduce(unsigned char *r,
     crypto_core_ed25519_scalar_reduce(r, s);
 }
 
+int
+crypto_core_ristretto255_scalar_is_canonical(const unsigned char *s)
+{
+    return sc25519_is_canonical(s);
+}
+
 size_t
 crypto_core_ristretto255_bytes(void)
 {

src/libsodium/include/sodium/crypto_core_ed25519.h

@@ -101,6 +101,10 @@ SODIUM_EXPORT
 void crypto_core_ed25519_scalar_reduce(unsigned char *r, const unsigned char *s)
             __attribute__ ((nonnull));
 
+SODIUM_EXPORT
+int crypto_core_ed25519_scalar_is_canonical(const unsigned char *s)
+            __attribute__ ((nonnull));
+
 #ifdef __cplusplus
 }
 #endif

src/libsodium/include/sodium/crypto_core_ristretto255.h

@@ -93,6 +93,10 @@ void crypto_core_ristretto255_scalar_reduce(unsigned char *r,
                                             const unsigned char *s)
             __attribute__ ((nonnull));
 
+SODIUM_EXPORT
+int crypto_core_ristretto255_scalar_is_canonical(const unsigned char *s)
+            __attribute__ ((nonnull));
+
 #ifdef __cplusplus
 }
 #endif

test/symbols/all-symbols.txt

@@ -200,6 +200,7 @@ crypto_core_ed25519_random
 crypto_core_ed25519_scalar_add
 crypto_core_ed25519_scalar_complement
 crypto_core_ed25519_scalar_invert
+crypto_core_ed25519_scalar_is_canonical
 crypto_core_ed25519_scalar_mul
 crypto_core_ed25519_scalar_negate
 crypto_core_ed25519_scalar_random
@@ -228,6 +229,7 @@ crypto_core_ristretto255_random
 crypto_core_ristretto255_scalar_add
 crypto_core_ristretto255_scalar_complement
 crypto_core_ristretto255_scalar_invert
+crypto_core_ristretto255_scalar_is_canonical
 crypto_core_ristretto255_scalar_mul
 crypto_core_ristretto255_scalar_negate
 crypto_core_ristretto255_scalar_random