diff options
| -rw-r--r-- | src/util/crypto_ecc.c | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/src/util/crypto_ecc.c b/src/util/crypto_ecc.c index 7110a2c4d..efbf2ee17 100644 --- a/src/util/crypto_ecc.c +++ b/src/util/crypto_ecc.c | |||
| @@ -33,6 +33,22 @@ | |||
| 33 | 33 | ||
| 34 | #define EXTRA_CHECKS 0 | 34 | #define EXTRA_CHECKS 0 |
| 35 | 35 | ||
| 36 | /** | ||
| 37 | * IMPLEMENTATION NOTICE: | ||
| 38 | * | ||
| 39 | * ECDSA: We use a non-standard curve for ECDSA: Ed25519. | ||
| 40 | * For performance reasons, we use cryptographic operations from | ||
| 41 | * libsodium wherever we can get away with it, even though libsodium | ||
| 42 | * itself does not support ECDSA. | ||
| 43 | * This is why the sign and verifiy functionality from libgcrypt is | ||
| 44 | * required and used. | ||
| 45 | * | ||
| 46 | * EdDSA: We use a standard EdDSA construction. | ||
| 47 | * (We still use libgcrypt for hashing and RNG, but not EC) | ||
| 48 | * | ||
| 49 | * ECDHE: For both EdDSA and ECDSA keys, we use libsodium for | ||
| 50 | * ECDHE due to performance benefits over libgcrypt. | ||
| 51 | */ | ||
| 36 | 52 | ||
| 37 | /** | 53 | /** |
| 38 | * Name of the curve we are using. Note that we have hard-coded | 54 | * Name of the curve we are using. Note that we have hard-coded |