Skip to content

Commit 0f6cd90

Browse files
authored
Update draft-irtf-cfrg-det-sigs-with-noise.md
1 parent f9c56e1 commit 0f6cd90

File tree

1 file changed

+9
-3
lines changed

1 file changed

+9
-3
lines changed

draft-irtf-cfrg-det-sigs-with-noise.md

Lines changed: 9 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -450,7 +450,11 @@ This document updates {{RFC6979}} and {{RFC8032}} to recommend constructions wit
450450

451451
The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 {{RFC2119}} {{RFC8174}} when, and only when, they appear in all capitals, as shown here.
452452

453-
# Updates to RFC 8032 (EdDSA) {#SecEdDSA}
453+
# Hedged EdDSA {#SecEdDSA}
454+
455+
This document updates RFC 8032 (EdDSA) to recommend hedged variants of EdDSA for deployments where side-channel attacks and fault injection attacks are a concern, the variants are called hedged EdDSA. The updates are invisible to the validator of the signature and compatible with existing EdDSA validators.
456+
457+
Update to RFC 8032:
454458

455459
For Ed25519ph, Ed25519ctx, and Ed25519: In deployments where side-channel and fault injection attacks are a concern, the following step is RECOMMENDED instead of step (2) in Section 5.1.6 of {{RFC8032}}:
456460

@@ -475,9 +479,11 @@ For Ed448ph and Ed448: In deployments where side-channel and fault injection att
475479
digest as a little-endian integer r.
476480
~~~~~~~~~~~~~~~~~~~~~~~
477481

478-
# Updates to RFC 6979 (Deterministic ECDSA)
482+
# Hedged ECDSA
483+
484+
This document updates RFC 6979 (deterministic ECDSA) to recommend a hedged variant of ECDSA for deployments where side-channel attacks and fault injection attacks are a concern, the variant is called hedged ECDSA. The updates are invisible to the validator of the signature and compatible with existing ECDSA validators.
479485

480-
For Deterministic ECDSA: In existing ECDSA deployments where side-channel and fault injection attacks are a concern, the following steps are RECOMMENDED instead of steps (d) and (f) in Section 3.2 of {{RFC6979}}:
486+
Update to RFC 6979: In ECDSA deployments where side-channel and fault injection attacks are a concern, the following steps are RECOMMENDED instead of steps (d) and (f) in Section 3.2 of {{RFC6979}}:
481487

482488
~~~~~~~~~~~~~~~~~~~~~~~
483489
d. Set:

0 commit comments

Comments
 (0)