Insecure default HashToPoint, find or create working elligator2 impl
cretz opened this issue · comments
Since Kyber's previous elligator impl was removed due to security concerns, I did not attempt to re-implement it here and instead reused the trivial BLS approach which just creates a scalar from a hash.
This issue is waiting on a secure elligator2 impl in Go. Any help is appreciated.