Tag: subgroup validation

A Vulnerability in Libsodium: Ed25519 low-level point validation bug

TL;DR A flaw was found in libsodium's low-level function crypto_core_ed25519_is_valid_point that allowed some non–main-subgroup Ed25519 points to be accepted. The…