Re: Undocumented novel Ed448 point encoding breaks interoperability

Werner Koch via Gnupg-devel <[email protected]> Thu, 15 Jan 2026 15:35:11 +0100
Newsgroups gmane.comp.encryption.gpg.devel
Message-ID <[email protected]>
On Mon,  5 Jan 2026 13:55, Andrew Gallagher said:

> Ed25519 follows the above spec, but Ed448 does not. Is this an error
> in the specification or an error in the implementation?

Yes, that is an error in the specs.  When I edited LibrePGP I included
most of the SOS specification clarifications Niibe-san once proposed to
the OpenPGP DT.  They were unfortunately rejected or got lost by that
major last rewrite of rfc4880bis.

I will correct LibrePGP for ED448 so that it matches actual use.


Shalom-Salam,

   Werner

-- 
The pioneers of a warless world are the youth that
refuse military service.             - A. Einstein

_______________________________________________
Gnupg-devel mailing list
[email protected]
https://lists.gnupg.org/mailman/listinfo/gnupg-devel
openpgp-digital-signature.asc (application/pgp-signature, 284 B)
-----BEGIN PGP SIGNATURE-----

iJ8EARYKAEcWIQSHd0YfKgdOvEgNNZQZzByeCFsQegUCaWj7HxsUgAAAAAAEAA5t
YW51MiwyLjUrMS4xMSwyLDINHHdrQGdudXBnLm9yZwAKCRAZzByeCFsQeq9vAQD6
OCgehHje3pQ+1u27Tlxr+FHnERPc9wQMXlB+cgRhJQEArlFQ6u6CkICt0b6RE87H
dTG6SlxZhftvoSjMiKlNegE=
=ru7u
-----END PGP SIGNATURE-----