DateKeys-App/testdata/vectors/ed25519_strict.json

{
  "spec": "0.14",
  "description": "Ed25519 signatures and the result of the strict profile of the author signature (spec v0.11, §29.9), after the cases of «Taming the many EdDSAs»; stdlib is the result of crypto/ed25519 of Go, for the record. Generated by the reference implementation. See testdata/README.md.",
  "vectors": [
    {
      "name": "a valid signature",
      "message": "446174654b657973",
      "public_key": "10770005d22145b75334902d3dbd10491a6f210afa80d3937d761a56c308d5ea",
      "signature": "5119b0822de6d25331d7c21c528f4945b8b77253241cc6b83c16ba265409ff0f1fdd979c37e18f4bd6bc9c1c18d4b8746ffdee1ce723e404feb1ca90288c3900",
      "valid": true,
      "stdlib": true
    },
    {
      "name": "S + ℓ",
      "message": "446174654b657973",
      "public_key": "10770005d22145b75334902d3dbd10491a6f210afa80d3937d761a56c308d5ea",
      "signature": "5119b0822de6d25331d7c21c528f4945b8b77253241cc6b83c16ba265409ff0f0cb18df95144a2a3ac5994bff6cd97896ffdee1ce723e404feb1ca90288c3910",
      "valid": false,
      "stdlib": false
    },
    {
      "name": "S with bit 253 set",
      "message": "446174654b657973",
      "public_key": "10770005d22145b75334902d3dbd10491a6f210afa80d3937d761a56c308d5ea",
      "signature": "5119b0822de6d25331d7c21c528f4945b8b77253241cc6b83c16ba265409ff0f1fdd979c37e18f4bd6bc9c1c18d4b8746ffdee1ce723e404feb1ca90288c3920",
      "valid": false,
      "stdlib": false
    },
    {
      "name": "R not canonical",
      "message": "446174654b657973",
      "public_key": "10770005d22145b75334902d3dbd10491a6f210afa80d3937d761a56c308d5ea",
      "signature": "edffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f1fdd979c37e18f4bd6bc9c1c18d4b8746ffdee1ce723e404feb1ca90288c3900",
      "valid": false,
      "stdlib": false
    },
    {
      "name": "A of small order, the point 0 of the torsion, R the identity and S = 0",
      "message": "446174654b657973200000000000000002",
      "public_key": "0100000000000000000000000000000000000000000000000000000000000000",
      "signature": "01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
      "valid": false,
      "stdlib": true
    },
    {
      "name": "A of small order, the point 1 of the torsion, R the identity and S = 0",
      "message": "446174654b65797320000000000000000d",
      "public_key": "c7176a703d4dd84fba3c0b760d10670f2a2053fa2c39ccc64ec7fd7792ac037a",
      "signature": "01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
      "valid": false,
      "stdlib": true
    },
    {
      "name": "A of small order, the point 2 of the torsion, R the identity and S = 0",
      "message": "446174654b657973200000000000000001",
      "public_key": "0000000000000000000000000000000000000000000000000000000000000080",
      "signature": "01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
      "valid": false,
      "stdlib": true
    },
    {
      "name": "A of small order, the point 3 of the torsion, R the identity and S = 0",
      "message": "446174654b657973200000000000000002",
      "public_key": "26e8958fc2b227b045c3f489f2ef98f0d5dfac05d3c63339b13802886d53fc05",
      "signature": "01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
      "valid": false,
      "stdlib": true
    },
    {
      "name": "A of small order, the point 4 of the torsion, R the identity and S = 0",
      "message": "446174654b65797320000000000000000f",
      "public_key": "ecffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f",
      "signature": "01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
      "valid": false,
      "stdlib": true
    },
    {
      "name": "A of small order, the point 5 of the torsion, R the identity and S = 0",
      "message": "446174654b657973200000000000000019",
      "public_key": "26e8958fc2b227b045c3f489f2ef98f0d5dfac05d3c63339b13802886d53fc85",
      "signature": "01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
      "valid": false,
      "stdlib": true
    },
    {
      "name": "A of small order, the point 6 of the torsion, R the identity and S = 0",
      "message": "446174654b657973200000000000000002",
      "public_key": "0000000000000000000000000000000000000000000000000000000000000000",
      "signature": "01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
      "valid": false,
      "stdlib": true
    },
    {
      "name": "A of small order, the point 7 of the torsion, R the identity and S = 0",
      "message": "446174654b657973200000000000000001",
      "public_key": "c7176a703d4dd84fba3c0b760d10670f2a2053fa2c39ccc64ec7fd7792ac03fa",
      "signature": "01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
      "valid": false,
      "stdlib": true
    },
    {
      "name": "A not canonical, y = p, sign 0, R the identity and S = 0",
      "message": "446174654b657973200000000000000002",
      "public_key": "edffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f",
      "signature": "01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
      "valid": false,
      "stdlib": true
    },
    {
      "name": "A not canonical, y = p, sign 1, R the identity and S = 0",
      "message": "446174654b657973200000000000000001",
      "public_key": "edffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
      "signature": "01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
      "valid": false,
      "stdlib": true
    },
    {
      "name": "A the identity with the sign bit, R the identity and S = 0",
      "message": "446174654b657973200000000000000000",
      "public_key": "0100000000000000000000000000000000000000000000000000000000000080",
      "signature": "01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
      "valid": false,
      "stdlib": true
    },
    {
      "name": "A of mixed order, 8 divides k: the equation without the cofactor holds",
      "message": "446174654b657973200000000000000006",
      "public_key": "b95f1903e3141ba54412bd1138119fbc7ab21aba35be980650ec3337b0a5c5e1",
      "signature": "57890b19a0fb99cfa5fae15f2f8364a4d2d70474bea04f66c611aa5e250026a60ccf279cc11141ef368a21cfdad37a727e43f59936c20d753dea73a0e508d60e",
      "valid": true,
      "stdlib": true
    },
    {
      "name": "A of mixed order, 8 does not divide k: only the equation with the cofactor holds",
      "message": "446174654b657973200000000000000000",
      "public_key": "b95f1903e3141ba54412bd1138119fbc7ab21aba35be980650ec3337b0a5c5e1",
      "signature": "57890b19a0fb99cfa5fae15f2f8364a4d2d70474bea04f66c611aa5e250026a642a681ccd920aa6da440dc535484ec7ec2904a332dd86256e024a37f6040900f",
      "valid": false,
      "stdlib": false
    },
    {
      "name": "R the identity, A of prime order",
      "message": "446174654b6579733a205220746865206964656e74697479",
      "public_key": "0368d6193d5242089bb4a5c019cceffe6a55d83495e57de52d7711ed864ca77d",
      "signature": "01000000000000000000000000000000000000000000000000000000000000007b2ee545c254e47cbe2f2774f74d640944034cc59d1ba903de7ecb767cf95304",
      "valid": true,
      "stdlib": true
    }
  ]
}
-												Sync testdata with DateKeys spec-v0.11 (datekeys-go ae33434)

SPEC_VERSION is 0.11. testdata brings format3_signed, format3_signed_cms and
format3_sealed, and the vectors ed25519_strict.json, security_cms.json and
locator.json; the mutation corpus has 210 cases. ibe-vectors.json adds the
three fixtures and remakes the two that Go regenerated, and
mutation-texts.json is made again with that reference.

This library still reads the security area as a reader of v0.10, so a
signature or a seal that the reference checks gives F1 or S1 here. The
Verdict type and the texts know F2 to F6 and S3 to S5, and the tests state
the gap with testing/pending.ts instead of hiding it; porting the
verification makes that file the identity. npm run verify and
testdata:check pass.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

											
										
										
											6 days ago
+								{
-												Specification 0.14, approved: SPEC_VERSION 0.14, testdata at spec-v0.14, one drand scheme and tlock_steps.json

- SPEC_VERSION 0.14; testdata synced from datekeys-go at 39b2033
  (spec-v0.14), which adds vectors/tlock_steps.json;
  testing/mutation-texts.json regenerated with Go: only its spec field
  changes.
- Decision 8: validateProfile admits only bls-unchained-g1-rfc9380, with
  its public key in G2, in the order and with the texts of Go's
  validateDrand at c041fa3; any other drand scheme fails with
  ERR_UNKNOWN_PROFILE before the key and the chain hash.
- vectors.test.ts walks tlock_steps.json value by value with the code of
  ibe.ts, release.ts and bls12381.ts, with its negative checks, and the
  testdata guard requires it. ibe.ts exports h3Base, h3Try and hashToG1,
  which h3, the encryption and release.ts now use.
- The comment of h3 said the top bit is cleared: the first byte is
  shifted one bit to the right, as kyber does.
- README and CHANGELOG.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

											
										
										
											1 day ago
+								  "spec": "0.14",
-												Sync testdata with DateKeys spec-v0.11 (datekeys-go ae33434)

SPEC_VERSION is 0.11. testdata brings format3_signed, format3_signed_cms and
format3_sealed, and the vectors ed25519_strict.json, security_cms.json and
locator.json; the mutation corpus has 210 cases. ibe-vectors.json adds the
three fixtures and remakes the two that Go regenerated, and
mutation-texts.json is made again with that reference.

This library still reads the security area as a reader of v0.10, so a
signature or a seal that the reference checks gives F1 or S1 here. The
Verdict type and the texts know F2 to F6 and S3 to S5, and the tests state
the gap with testing/pending.ts instead of hiding it; porting the
verification makes that file the identity. npm run verify and
testdata:check pass.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

											
										
										
											6 days ago
+								  "description": "Ed25519 signatures and the result of the strict profile of the author signature (spec v0.11, §29.9), after the cases of «Taming the many EdDSAs»; stdlib is the result of crypto/ed25519 of Go, for the record. Generated by the reference implementation. See testdata/README.md.",
 								  "vectors": [
 								    {
 								      "name": "a valid signature",
 								      "message": "446174654b657973",
 								      "public_key": "10770005d22145b75334902d3dbd10491a6f210afa80d3937d761a56c308d5ea",
 								      "signature": "5119b0822de6d25331d7c21c528f4945b8b77253241cc6b83c16ba265409ff0f1fdd979c37e18f4bd6bc9c1c18d4b8746ffdee1ce723e404feb1ca90288c3900",
 								      "valid": true,
 								      "stdlib": true
 								    },
 								    {
 								      "name": "S + ℓ",
 								      "message": "446174654b657973",
 								      "public_key": "10770005d22145b75334902d3dbd10491a6f210afa80d3937d761a56c308d5ea",
 								      "signature": "5119b0822de6d25331d7c21c528f4945b8b77253241cc6b83c16ba265409ff0f0cb18df95144a2a3ac5994bff6cd97896ffdee1ce723e404feb1ca90288c3910",
 								      "valid": false,
 								      "stdlib": false
 								    },
 								    {
 								      "name": "S with bit 253 set",
 								      "message": "446174654b657973",
 								      "public_key": "10770005d22145b75334902d3dbd10491a6f210afa80d3937d761a56c308d5ea",
 								      "signature": "5119b0822de6d25331d7c21c528f4945b8b77253241cc6b83c16ba265409ff0f1fdd979c37e18f4bd6bc9c1c18d4b8746ffdee1ce723e404feb1ca90288c3920",
 								      "valid": false,
 								      "stdlib": false
 								    },
 								    {
 								      "name": "R not canonical",
 								      "message": "446174654b657973",
 								      "public_key": "10770005d22145b75334902d3dbd10491a6f210afa80d3937d761a56c308d5ea",
 								      "signature": "edffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f1fdd979c37e18f4bd6bc9c1c18d4b8746ffdee1ce723e404feb1ca90288c3900",
 								      "valid": false,
 								      "stdlib": false
 								    },
 								    {
 								      "name": "A of small order, the point 0 of the torsion, R the identity and S = 0",
 								      "message": "446174654b657973200000000000000002",
 								      "public_key": "0100000000000000000000000000000000000000000000000000000000000000",
 								      "signature": "01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
 								      "valid": false,
 								      "stdlib": true
 								    },
 								    {
 								      "name": "A of small order, the point 1 of the torsion, R the identity and S = 0",
 								      "message": "446174654b65797320000000000000000d",
 								      "public_key": "c7176a703d4dd84fba3c0b760d10670f2a2053fa2c39ccc64ec7fd7792ac037a",
 								      "signature": "01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
 								      "valid": false,
 								      "stdlib": true
 								    },
 								    {
 								      "name": "A of small order, the point 2 of the torsion, R the identity and S = 0",
 								      "message": "446174654b657973200000000000000001",
 								      "public_key": "0000000000000000000000000000000000000000000000000000000000000080",
 								      "signature": "01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
 								      "valid": false,
 								      "stdlib": true
 								    },
 								    {
 								      "name": "A of small order, the point 3 of the torsion, R the identity and S = 0",
 								      "message": "446174654b657973200000000000000002",
 								      "public_key": "26e8958fc2b227b045c3f489f2ef98f0d5dfac05d3c63339b13802886d53fc05",
 								      "signature": "01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
 								      "valid": false,
 								      "stdlib": true
 								    },
 								    {
 								      "name": "A of small order, the point 4 of the torsion, R the identity and S = 0",
 								      "message": "446174654b65797320000000000000000f",
 								      "public_key": "ecffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f",
 								      "signature": "01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
 								      "valid": false,
 								      "stdlib": true
 								    },
 								    {
 								      "name": "A of small order, the point 5 of the torsion, R the identity and S = 0",
 								      "message": "446174654b657973200000000000000019",
 								      "public_key": "26e8958fc2b227b045c3f489f2ef98f0d5dfac05d3c63339b13802886d53fc85",
 								      "signature": "01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
 								      "valid": false,
 								      "stdlib": true
 								    },
 								    {
 								      "name": "A of small order, the point 6 of the torsion, R the identity and S = 0",
 								      "message": "446174654b657973200000000000000002",
 								      "public_key": "0000000000000000000000000000000000000000000000000000000000000000",
 								      "signature": "01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
 								      "valid": false,
 								      "stdlib": true
 								    },
 								    {
 								      "name": "A of small order, the point 7 of the torsion, R the identity and S = 0",
 								      "message": "446174654b657973200000000000000001",
 								      "public_key": "c7176a703d4dd84fba3c0b760d10670f2a2053fa2c39ccc64ec7fd7792ac03fa",
 								      "signature": "01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
 								      "valid": false,
 								      "stdlib": true
 								    },
 								    {
 								      "name": "A not canonical, y = p, sign 0, R the identity and S = 0",
 								      "message": "446174654b657973200000000000000002",
 								      "public_key": "edffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f",
 								      "signature": "01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
 								      "valid": false,
 								      "stdlib": true
 								    },
 								    {
 								      "name": "A not canonical, y = p, sign 1, R the identity and S = 0",
 								      "message": "446174654b657973200000000000000001",
 								      "public_key": "edffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
 								      "signature": "01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
 								      "valid": false,
 								      "stdlib": true
 								    },
 								    {
 								      "name": "A the identity with the sign bit, R the identity and S = 0",
 								      "message": "446174654b657973200000000000000000",
 								      "public_key": "0100000000000000000000000000000000000000000000000000000000000080",
 								      "signature": "01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
 								      "valid": false,
 								      "stdlib": true
 								    },
 								    {
 								      "name": "A of mixed order, 8 divides k: the equation without the cofactor holds",
 								      "message": "446174654b657973200000000000000006",
 								      "public_key": "b95f1903e3141ba54412bd1138119fbc7ab21aba35be980650ec3337b0a5c5e1",
 								      "signature": "57890b19a0fb99cfa5fae15f2f8364a4d2d70474bea04f66c611aa5e250026a60ccf279cc11141ef368a21cfdad37a727e43f59936c20d753dea73a0e508d60e",
 								      "valid": true,
 								      "stdlib": true
 								    },
 								    {
 								      "name": "A of mixed order, 8 does not divide k: only the equation with the cofactor holds",
 								      "message": "446174654b657973200000000000000000",
 								      "public_key": "b95f1903e3141ba54412bd1138119fbc7ab21aba35be980650ec3337b0a5c5e1",
 								      "signature": "57890b19a0fb99cfa5fae15f2f8364a4d2d70474bea04f66c611aa5e250026a642a681ccd920aa6da440dc535484ec7ec2904a332dd86256e024a37f6040900f",
 								      "valid": false,
 								      "stdlib": false
 								    },
 								    {
 								      "name": "R the identity, A of prime order",
 								      "message": "446174654b6579733a205220746865206964656e74697479",
 								      "public_key": "0368d6193d5242089bb4a5c019cceffe6a55d83495e57de52d7711ed864ca77d",
 								      "signature": "01000000000000000000000000000000000000000000000000000000000000007b2ee545c254e47cbe2f2774f74d640944034cc59d1ba903de7ecb767cf95304",
 								      "valid": true,
 								      "stdlib": true
 								    }
 								  ]
 								}