RFC Errata
RFC 8032, "Edwards-Curve Digital Signature Algorithm (EdDSA)", January 2017
Source of RFC: IRTF
Errata ID: 5758
Status: Held for Document Update
Type: Technical
Publication Format(s) : TEXT
Reported By: Franck Rondepierre
Date Reported: 2019-06-21
Held for Document Update by: Stanislav Smyshlyaev
Date Held: 2022-02-15
Section 5.1. says:
(p+3)/8 3 (p-5)/8 x = (u/v) = u v (u v^7) (mod p)
It should say:
(p+3)/8 (p-5)/8 x = (u/v) = u (u v) (mod p)
Notes:
--VERIFIER NOTES--
The original text was correct (verified by Nick Sullivan).
01/28/2022: RFC Editor changed status to Reported per discussion with Stanislav V. Smyshlyaev.
02/15/2022: The status is changed to "Held for Document Update" by Stanislav Smyshlyaev. The proposed formulas are correct as well (for the specific case of the EdDSA parameters) and provide a slight efficiency gain.