MtA (Multiplicative to Additive) share conversion protocol for Ed25519
HRezaei opened this issue · comments
This test function works fine with the secp256_k1 curve, but if you change the underlying curve scalars and points to those of Ed25519, it fails always. To see the issue you need to refactor the test function and also MessageA
, MessageB
, etc. You can take a look at this repo where I prepared the mta_test in isolation and performed tests over all the curves (using curv-kzen v0.9). The result shows issues with Ed25519 and Ristretto, others curves work fine.