cv25519 scalar byte order

[Werner Koch]

On Wed, 14 Feb 2018 06:13, gniibe at fsij.org said:

> I wonder if we have difference in the interpretation of secret part
> (skey[3]).
>
> In GnuPG, this part is interpreted as standard MPI representation
> (big-endian).
>
> For better interoperability, we could support the prefix 0x40 for this
> secret part, I suppose.

That would be incorrect.  The prefix (e.g. 0x40) indicates a _point_
format and not the format of a scalar.  Thus skey[3] MAY not have this
prefix.


Shalom-Salam,

   Werner


-- 
#  Please read:  Daniel Ellsberg - The Doomsday Machine  #
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/gnupg-devel/attachments/20180219/ee0f640f/attachment.sig>