kyber
kyber copied to clipboard
Should all Kyber curves check for point/scalar canonicity?
PR #434 introduces checks that a group can opt-in to by providing certain methods (Point.IsCanonical, Point.HasSmallOrder, Scalar.IsCanonical).
We need to investigate and maybe implement these checks on var_ed25519 and p256 curves as well.