qDSA

A pure-Rust implementation of qDSA (aka Quotient DSA) over Curve25519. Includes X25519 key agreement, Elligator2 encoding and decoding, and a designated-verifier adaptation of qDSA.

• Verified GF(2^255-19) operations provided by fiat-crypto.
• qDSA/SHAKE128 compatibility tested with the reference C version by Joost Renes.
• X25519 compatibility tested with RFC 7748 and Project Wycheproof.
• Elligator2 compatibility tested with Monocypher 3.1.3.

License

Copyright © 2022 Coda Hale

Distributed under the BSD 3-Clause License.