Merge pull request #884 from isislovecruft/feature/scalar-succeed-fast

Optimisation to succeed fast when checking signature scalar is reduced.
This commit is contained in:
Frank Denis
2019-10-12 02:19:42 +02:00
committed by GitHub
@@ -28,8 +28,11 @@ _crypto_sign_ed25519_verify_detached(const unsigned char *sig,
return -1;
}
#else
if (sc25519_is_canonical(sig + 32) == 0 ||
ge25519_has_small_order(sig) != 0) {
if (sig[63] & 240 &&
sc25519_is_canonical(sig + 32) == 0) {
return -1;
}
if (ge25519_has_small_order(sig) != 0) {
return -1;
}
if (ge25519_is_canonical(pk) == 0 ||