Fix for biased signature nonce

This commit is contained in:
Sarang Noether 2019-08-12 15:58:15 -04:00
parent 1bb4ae3b5e
commit 4b1df4e50f

View File

@ -275,8 +275,6 @@ namespace crypto {
buf.key = pub; buf.key = pub;
try_again: try_again:
random_scalar(k); random_scalar(k);
if (((const uint32_t*)(&k))[7] == 0) // we don't want tiny numbers here
goto try_again;
ge_scalarmult_base(&tmp3, &k); ge_scalarmult_base(&tmp3, &k);
ge_p3_tobytes(&buf.comm, &tmp3); ge_p3_tobytes(&buf.comm, &tmp3);
hash_to_scalar(&buf, sizeof(s_comm), sig.c); hash_to_scalar(&buf, sizeof(s_comm), sig.c);