suzanne.soy/fork-openpgpjs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Do not clamp generated private key in X25519 (new format)

Browse Source 
This was required by legacy ECDH over curve25519, but not for the new format.
Relevant spec: https://www.ietf.org/archive/id/draft-ietf-openpgp-crypto-refresh-10.html#name-curve25519legacy-ecdh-secre
This commit is contained in:
larabr 2023-09-29 16:13:31 +02:00
parent b6fbab0443
commit c0f57dffb2
1 changed files with 0 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/crypto/public_key/elliptic/ecdh_x.js
View File

@ -27,8 +27,6 @@ export async function generate(algo) {
case enums.publicKey.x25519: { case enums.publicKey.x25519: {
// k stays in little-endian, unlike legacy ECDH over curve25519 // k stays in little-endian, unlike legacy ECDH over curve25519
const k = getRandomBytes(32); const k = getRandomBytes(32);
k[0] &= 248;
k[31] = (k[31] & 127) | 64;
const { publicKey: A } = nacl.box.keyPair.fromSecretKey(k); const { publicKey: A } = nacl.box.keyPair.fromSecretKey(k);
return { A, k }; return { A, k };
} }