A pure-Rust implementation of qDSA (aka Quotient DSA) over Curve25519. Includes X25519 key agreement, Elligator2 encoding and decoding, and a designated-verifier adaptation of qDSA.
- Verified
GF(2^255-19)operations provided by fiat-crypto. - qDSA/SHAKE128 compatibility tested with the reference C version by Joost Renes.
- X25519 compatibility tested with RFC 7748 and Project Wycheproof.
- Elligator2 compatibility tested with Monocypher 3.1.3.
Copyright © 2022 Coda Hale
Distributed under the BSD 3-Clause License.