RFC Errata
RFC 8032, "Edwards-Curve Digital Signature Algorithm (EdDSA)", January 2017
Source of RFC: IRTF
Errata ID: 8197
Status: Reported
Type: Technical
Publication Format(s) : TEXT
Reported By: Nawras H. Sabbry
Date Reported: 2024-12-03
Section 5.1.4 says:
However, using the formulas described in Section 3.2 of [Edwards-revisited] and in [EFD-TWISTED-DBL] saves a few smaller operations.
It should say:
However, using the formulas described in Section 3.3 of [Edwards-revisited] and in [EFD-TWISTED-DBL] saves a few smaller operations.
Notes:
In RFC 8032 Section 5.1.4, the reference to "formulas described in Section 3.2 of [Edwards-revisited]" is incorrect. Section 3.2 of [Edwards-revisited] discusses Dedicated Addition, not doubling. The doubling formulas mentioned in RFC 8032 actually appear in Section 3.3 of [Edwards-revisited], under Dedicated Doubling.