Merge pull request #331 from fmoessbauer/master

document scalar clamping of curve25519 keys
This commit is contained in:
Hunter Thornsberry
2024-11-09 20:25:38 -05:00
committed by GitHub

View File

@@ -3,6 +3,8 @@ import { x25519 } from "@noble/curves/ed25519";
export function getX25519PrivateKey(): Uint8Array {
const key = x25519.utils.randomPrivateKey();
// scalar clamping for curve25519, according to
// https://www.rfc-editor.org/rfc/rfc7748#section-5
key[0] &= 248;
key[31] &= 127;
key[31] |= 64;