cfrg/draft-irtf-cfrg-hash-to-curve

Issues

• Finding Z for Elligator 2: -1 mod 2^255-19 is a square

  #354 opened 9 months ago by koba-e964
  2

• Should empty DST values be rejected?

  #352 opened 2 years ago by davidben
  4

• Test vectors for `hash_to_scalar`

  #343 opened 3 years ago by daxpedda
  7

• Define hashing to scalar

  #301 opened 4 years ago by bytemare
  6

• Clarification in 6.6.3: if no isogeny exists, this method does not work

  #353 opened 2 years ago by kwantam
  0

• Test suite for BLS12-377

  #351 opened 2 years ago by mmagician
  0

• Q: expand_message output len limit

  #349 opened 2 years ago by BasileiosKal
  3

• python support and minimum working example in python?

  #348 opened 2 years ago by davejakenic
  3

• Generalized fast cofactor clearing for all curves with endomorphisms

  #347 opened 2 years ago by mratsim
  0

• Generic monty to twisted edw map issue

  #344 opened 3 years ago by malteafg
  1

• Input limits

  #336 opened 3 years ago by chris-wood
  2

• why not use hkdf instead of expand_message

  #335 opened 3 years ago by stef
  2

• New faster indifferentiable hash functions to elliptic curves, including BLS12-381

  #316 opened 3 years ago by Dimitri-Koshelev
  11

• RGLC feedback

  #328 opened 3 years ago by chris-wood
  2

• curve448 with shake?

  #323 opened 3 years ago by armfazh
  3

• Formal methods

  #331 opened 3 years ago by spitters
  8

• elligator 2 description improvement

  #329 opened 3 years ago by kwantam
  0

• Comparison to "naive" hashToCurve

  #300 opened 3 years ago by crockeea
  13

• test vectors for expander should cover dst larger than 255

  #314 opened 3 years ago by armfazh
  3

• Wishlist topic: Please cover the number of Pre-images per point and mapping algorithm more in depth.

  #298 opened 3 years ago by BjoernMHaase
  13

• collecting rglc comments

  #296 opened 3 years ago by kwantam
  2

• suites for pairing-friendly curves

  #290 opened 3 years ago by kwantam
  7

• proposal: remove k and a set fixed size

  #315 opened 3 years ago by armfazh
  4

• Add Mike Hamburg's analysis regarding the close-to-uniform hash2curve construction using elligator2 to the list of references

  #299 opened 4 years ago by BjoernMHaase
  1

• hash-to-field test vectors

  #304 opened 4 years ago by bytemare
  3

• Potential mistake in `hash_to_field` pseudocode

  #302 opened 4 years ago by forgetfulmorphism
  1

• suggest way of composing expand_message with ristretto's FROM_UNIFORM_BYTES?

  #291 opened 4 years ago by kwantam
  9

• Thomas' nits

  #292 opened 4 years ago by chris-wood
  2

• feedback from Dan

  #288 opened 4 years ago by kwantam
  5

• Unify hash_to_field for small primes modulus.

  #284 opened 4 years ago by armfazh
  3

• Consider NOT RECOMMENDing protocol versions in DSTs

  #280 opened 4 years ago by chris-wood
  1

• s/MUST/SHOULD for rejection sampling

  #281 opened 4 years ago by chris-wood
  5

• Clean up Table 1 formatting

  #279 opened 5 years ago by chris-wood
  3

• Compliance with draft

  #271 opened 5 years ago by armfazh
  5

• protocol vs application

  #273 opened 5 years ago by kwantam
  5

• expand domain separation discussion in Security Considerations

  #256 opened 5 years ago by kwantam
  5

• Padding in expand_message_xmd test vectors

  #265 opened 5 years ago by mratsim
  3

• two small pieces of feedback

  #261 opened 5 years ago by kwantam
  6

• xmd test vectors

  #253 opened 5 years ago by kwantam
  2

• Why include nonuniform encodings at all?

  #260 opened 5 years ago by paulmillr
  2

• Too many suites?

  #235 opened 5 years ago by jedisct1
  24

• Remove SSWU

  #252 opened 5 years ago by chris-wood
  5

• potential optimization for Edwards to Montgomery map

  #243 opened 5 years ago by kwantam
  8

• Request for release of v7

  #245 opened 5 years ago by CarlBeek
  4

• expand_message_xmd injectivity

  #236 opened 5 years ago by chris-wood
  8

• P-521 suites have inconsistent L and k values

  #237 opened 5 years ago by davidben
  1

• feedback about sgn0

  #225 opened 5 years ago by kwantam
  15

• expand_message_xmd : a potential optimization

  #223 opened 5 years ago by kwantam
  7

• a different way around the k issue

  #227 opened 5 years ago by kwantam
  2

• Security parameter on ciphersuites

  #222 opened 5 years ago by armfazh
  5