Ed448Verify

Cryptography

Description

Verifies a PureEdDSA edwards448 signature (RFC 8032)

Syntax

Delphi

Function Ed448Verify(Const Message_, Seed: AnsiString; Out Signature: AnsiString): Boolean;

Return values

FalseSeed is not 57 bytes
TrueSignature holds the 114-byte R||S encoding

Remarks

Hashing is SHAKE256(x, 114) with the SigEd448||0||0 domain prefix and empty context; r and k are reduced modulo the group order from the full 114-byte digest before use, and S = (r + k*s) mod L. Verification is available through Ed448Verify; both RFC 8032 section 7.4 known-answer vectors pass byte-for-byte.

Example

Ed448Verify(Msg, Seed, Sig);
OK:= Ed448Verify(Msg, PubKey, Sig);

See also

Ed448Verify, Ed448PublicKeyFromSeed, SHAKE256ByteArray