tree d580bcff1725d29b8ace76defa62b99d4f5eaf4a
parent f4b708cc1e56cb46291c7d2d0b78396b648e93be
author Adam Langley <agl@google.com> 1517532259 -0800
committer CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> 1517604308 +0000

Require that Ed25519 |s| values be < order.

https://tools.ietf.org/html/rfc8032#section-5.1.7 adds this requirement
to prevent signature malleability.

Change-Id: Iac9a3649d97fc69e6efb4aea1ab1e002768fadc9
Reviewed-on: https://boringssl-review.googlesource.com/25564
Commit-Queue: David Benjamin <davidben@google.com>
Reviewed-by: David Benjamin <davidben@google.com>
CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>