Comment

jedisct1 · Dec 13, 2017 · 675149b · 675149b
1 parent a1d438c
commit 675149b
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/src/libsodium/crypto_scalarmult/curve25519/ref10/x25519_ref10.c b/src/libsodium/crypto_scalarmult/curve25519/ref10/x25519_ref10.c
@@ -8,6 +8,11 @@
 #include "utils.h"
 #include "x25519_ref10.h"
 
+/*
+ * Reject small order points early to mitigate the implications of
+ * unexpected optimizations that would affect the ref10 code.
+ * See https://eprint.iacr.org/2017/806.pdf for reference.
+ */
 static int
 has_small_order(const unsigned char s[32])
 {