3 ms·
The signature algorithm uses the same hash, so there isn't any meaningful opening there. :)
by nullc 6y ago
The signature algorithm uses the same hash, so there isn't any meaningful opening there. :)
- h_anna_h 6y agoThere is a reason ed25519 is used instead of ed25519ph :) PureEdDSA does not break when a hash function without collision resistance is used.
- nullc 6y agoDoesn't apply to PGP. :) And the kind of theoretical attack that non-prehashing protects you from requires that you sign an attacker chosen message -- relevant in some applications but kind of contrived.