def sign_body

bend-collections-laws-crypto@1.0.0.0 · spec/crypto/ed25519.bend:265

import Base
import bend-collections-laws-crypto@1.0.0.0/spec/lib/common.bend as C
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/curve25519/field.bend as FS
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/curve25519/x25519.bend as SX
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/sha512.bend as SHA

265def sign_body(+one: Nat, +p: Nat, +d: Nat, +h: List<&2, U32>, +msg: List<&2, U32>) -> List<&2, U32>:
266  +el = ell(one)
267  +a = public_of(one, p, d, h)
268  +r = Nat.mod(FS.value(SHA.sha512_bytes(cat(rest(32n, h), msg))), el)
269  +rb = encode(one, p, mul(one, p, d, r, base(p, d)))
270  +k = hram(one, rb, a, msg)
271  cat(rb, SX.le_bytes(C.shift(5n, one), Nat.mod(Nat.add(r, Nat.mul(k, secret(h))), el)))