RFC 8032, "Edwards-Curve Digital Signature Algorithm (EdDSA)", January 2017

Errata ID: 5759
Status: Rejected
Type: Technical
Publication Format(s) : TEXT
Reported By: Franck Rondepierre
Date Reported: 2019-06-21
Rejected by: Stanislav Smyshlyaev
Date Rejected: 2021-10-26

Section 5.2. says:

                          (p+1)/4    3            (p-3)/4
                 x = (u/v)        = u  v (u^5 v^3)         (mod p)

It should say:

                          (p+1)/4            (p-3)/4
                 x = (u/v)        =  u (u v)         (mod p)

Notes:

--VERIFIER NOTES--
The original text was correct (verified by Nick Sullivan).

Report New Errata