lsd0001

commit 988934d9724eaf96ec5c4941b242136a4dec3b98
parent 4e4fb3536aeda118ed2c5b8632d36bc4ae0b7be0
Author: Martin Schanzenbach <schanzen@gnunet.org>
Date:   Wed,  9 Feb 2022 14:09:26 +0100

minor

Diffstat:
M
draft-schanzen-gns.xml
 | 
8
++++----

1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/draft-schanzen-gns.xml b/draft-schanzen-gns.xml
@@ -1167,12 +1167,12 @@ S-Decrypt(zk,label,expiration,ciphertext):
          </t>
          <artwork name="" type="" align="left" alt=""><![CDATA[
 ZKDF-Private(d,label):
-  /* Calculate zk from d */
-  a := SHA-512 (d)
   /* EdDSA clamping */
+  a := SHA-512 (d)
   a[0] &= 248
   a[31] &= 127
   a[31] |= 64
+  /* Calculate zk from d */
   zk := a * G
 
   /* Calculate the blinding factor */
@@ -1253,12 +1253,12 @@ ZKDF-Public(zk,label):
          </t>
          <artwork name="" type="" align="left" alt=""><![CDATA[
 SignDerived(d,label,message):
-  /* Calculate zk from d */
-  a := SHA-512 (d)
   /* EdDSA clamping */
+  a := SHA-512 (d)
   a[0] &= 248
   a[31] &= 127
   a[31] |= 64
+  /* Calculate zk from d */
   zk := a * G
 
   /* Calculate blinding factor */