3 ms·
There is a reason ed25519 is used instead of ed25519ph :) PureEdDSA does not break when a hash function without collision resistance is used.
by h_anna_h 5y ago
There is a reason ed25519 is used instead of ed25519ph :)
PureEdDSA does not break when a hash function without collision resistance is used.
- nullc 5y agoDoesn't apply to PGP. :) And the kind of theoretical attack that non-prehashing protects you from requires that you sign an attacker chosen message -- relevant in some applications but kind of contrived.