> At this point, we could try to review all of curve25519-dalek for implementation flaws, but that would take a long time and make for an excruciatingly dull re

> At this point, we could try to review all of curve25519-dalek for implementation flaws, but that would take a long time and make for an excruciatingly dull read > At some point in the future, I should review curve25519-dalek in detail to ascertain its quality. Not sure if you noticed, signal uses their own fork of curve25519-dalek with "lizard" extension, IIRC primarily for groups: https://github.com/signalapp/curve25519-dalek/tree/main/curve25519-dalek/src/lizard https://github.com/signalapp/curve25519-dalek/tree/main/curv... I guess the diff makes an easier starting point than the entire library. Thank you for the always very informative and insightful posts!