Dichotomy between verification equations for EdDSA #19
Description
The Section 5.1.7 of RFC-8032 specifies:
5.1.7 Verify
3. Check the group equation [8][S]B = [8]R + [8][k]A'. It's
sufficient, but not required, to instead check [S]B = R + [k]A'.
which equation will be used?
🚀 : [h][S]B = [h]R + [h][k]A'
❤️ : [S]B = R + [k]A'