Hi,

I reported this to the mailing list but no reply. That's why I report it here:

I have seen message_len has checked here:
https://github.com/openssl/openssl/blob/master/crypto/ec/curve448/eddsa.c#L164
https://github.com/openssl/openssl/blob/master/crypto/ec/curve448/eddsa.c#L205

(message_len > 0 && !EVP_DigestUpdate(hashctx, message, message_len)

But it has not checked here:

https://github.com/openssl/openssl/blob/master/crypto/ec/curve448/eddsa.c#L275

!EVP_DigestUpdate(hashctx, message, message_len)

Is there anything missing?

Thanks!