AnomalRoil

It seems like a workaround could be to rename it into "One-End Encryptions", so it'd be plural and it is well known that plural is not singular.

Yeah, there is a trick there, since it is singular, the decryption Oracle simply returns `false` on each query.

This would also solve https://github.com/gopasspw/gopass/issues/1664 on our side 👍

My problem isn't knowing what I want to do with the keys, my problem is that a user loading their secret key should be able to verify their own messages...

I feel like Tink is making key management (export, import, etc.) way more difficult than it ought to be. I don't like having to count on catching a generic `GeneralSecurityException`...

I just tried clicking on the URL link button on the UI-test page and it seems to be selecting both parenthesis, not the `https://` anchor?  Trying to paste a...

RFC8032 is about EdDSA, while this repo is really "just" about Curve25519, so I'd argue that this is not an issue for curve25519, but rather for the ed25519 repo. That...

That's for ed25519-dalek, not for curve25519-dalek IMO. I was also just providing some context, not saying we shouldn't change it or whatsoever.

Notice this is not necessarily something that even _should_ be fixed. To exploit it, it would require (hundreds of) thousands extremely good timing measurements with wrong values, which should lead...

No, this is not a solution. Firefox 55 is not a long term support release and should never be used anymore. On the other hand, [Firefox 52](https://www.mozilla.org/en-US/firefox/organizations/) is an ESR,...