Require cofactorless (unbatched) verification equation

WICG · Feb 8, 2024 · 3dd7b71 · 3dd7b71
1 parent c9eaaac
commit 3dd7b71
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/index.html b/index.html
@@ -1883,7 +1883,8 @@ <h4>Operations</h4>
  <li>
  <p>
  Perform the Ed25519 verification steps, as specified in [[RFC8032]],
- Section 5.1.7, on the |signature|, with |message| as |M|,
+ Section 5.1.7, using the cofactorless (unbatched) equation,
+ [S]B = R + [k]A', on the |signature|, with |message| as |M|,
  using the Ed25519 public key associated with |key|.
  </p>
  </li>
@@ -2775,7 +2776,8 @@ <h4>Operations</h4>
  <li>
  <p>
  Perform the Ed448 verification steps, as specified in [[RFC8032]],
- Section 5.2.7, on the |signature|, with |message| as |M|
+ Section 5.2.7, using the cofactorless (unbatched) equation,
+ [S]B = R + [k]A', on the |signature|, with |message| as |M|
  and |context| as |C|,
  using the Ed448 public key associated with |key|.
  </p>