Document open issues around Ed25519

Reference the open issues in WICG/webcrypto-secure-curves around randomized signatures and small-order points in the spec text.
w3c · Oct 15, 2024 · f6d2b01 · f6d2b01
1 parent 6248189
commit f6d2b01
Showing 1 changed file with 26 additions and 0 deletions.
diff --git a/spec/Overview.html b/spec/Overview.html
@@ -10078,6 +10078,16 @@ <h4>Operations</h4>
                     Section 5.1.6, with |message| as |M|,
                     using the Ed25519 private key associated with |key|.
                   </p>
+                  <div class="issue">
+                    <p>
+                      Some implementations may (wish to) generate randomized signatures
+                      as per <a href="https://datatracker.ietf.org/doc/draft-irtf-cfrg-det-sigs-with-noise/">draft-irtf-cfrg-det-sigs-with-noise</a>
+                      instead of deterministic signatures as per [[RFC8032]].
+                    </p>
+                    <p>
+                      See <a href="https://github.com/WICG/webcrypto-secure-curves/issues/28">WICG/webcrypto-secure-curves issue 28</a>.
+                    </p>
+                  </div>
                 </li>
                 <li>
                   <p>
@@ -10105,13 +10115,29 @@ <h4>Operations</h4>
                     If the key data of |key| represents an invalid point or a small-order element
                     on the Elliptic Curve of Ed25519, return `false`.
                   </p>
+                  <div class="issue">
+                    <p>
+                      Not all implementations perform this check.
+                    </p>
+                    <p>
+                      See <a href="https://github.com/WICG/webcrypto-secure-curves/issues/27">WICG/webcrypto-secure-curves issue 27</a>.
+                    </p>
+                  </div>
                 </li>
                 <li>
                   <p>
                     If the point R, encoded in the first half of |signature|,
                     represents an invalid point or a small-order element
                     on the Elliptic Curve of Ed25519, return `false`.
                   </p>
+                  <div class="issue">
+                    <p>
+                      Not all implementations perform this check.
+                    </p>
+                    <p>
+                      See <a href="https://github.com/WICG/webcrypto-secure-curves/issues/27">WICG/webcrypto-secure-curves issue 27</a>.
+                    </p>
+                  </div>
                 </li>
                 <li>
                   <p>