silur/ecvrf

An elliptic curve verifiable random function

Hi I'm Silur 🦊

I like to hack stuff and build things that my hacker friends can't break. 🔒

I'm also a cryptographer and a quantum-computing researcher at Wigner Research Center of Physics

Most of my activity goes to

• privacy-enhancing tech 🔑
• web security 🌏
• AI security 🤖
• quantum safety
• blockchain 🔗

If you need super-nasty homebrew security, crypto or blockchain reach out to me for consulting: silur[at]cryptall[dot]co

ecvrf's Issues

Curve25519 vs. Ristretto255. Have you seen schnorrkel?

Are you tied to curve25519 for an RFC or could you switch to use the prime-order group based on curve25519, also implemented in curve25519-dalek, Ristretto255?

If yes: you may want to use schnorrkel.

If not, you may still want to take that as a reference. Schnorrkel uses merlin for domain separation and to bind the full transcript to the proof to avoid unintended misuse of proofs; without relying on a secure source of entropy (at runtime; assuming keys were generated with a secure source of entropy). Oh and it supports batching.