Skip to content

Commit c13cd90

Browse files
committed
fixup! crypto: add signDigest/verifyDigest and Ed25519ctx support
1 parent 5a196fe commit c13cd90

1 file changed

Lines changed: 4 additions & 2 deletions

File tree

doc/api/crypto.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5790,7 +5790,8 @@ dependent upon the key type.
57905790

57915791
`algorithm` is required to be `null` or `undefined` for Ed25519, Ed448, and
57925792
ML-DSA. For Ed25519 and Ed448, this function uses the pure signature schemes
5793-
from [RFC 8032][] (or Ed25519ctx when a `context` is provided). Ed25519 and
5793+
from [RFC 8032][] (or Ed25519ctx when a non-empty `context` is provided;
5794+
an empty or absent context uses pure Ed25519). Ed25519 and
57945795
Ed448 signatures produced by this function cannot be verified with
57955796
[`crypto.verifyDigest()`][] because it uses the Ed25519ph and Ed448ph prehash
57965797
variants which have different domain separation.
@@ -5998,7 +5999,8 @@ key type.
59985999

59996000
`algorithm` is required to be `null` or `undefined` for Ed25519, Ed448, and
60006001
ML-DSA. For Ed25519 and Ed448, this function uses the pure signature schemes
6001-
from [RFC 8032][] (or Ed25519ctx when a `context` is provided). Ed25519 and
6002+
from [RFC 8032][] (or Ed25519ctx when a non-empty `context` is provided;
6003+
an empty or absent context uses pure Ed25519). Ed25519 and
60026004
Ed448 signatures produced by [`crypto.signDigest()`][] cannot be verified with
60036005
this function because they use the Ed25519ph and Ed448ph prehash variants which
60046006
have different domain separation.

0 commit comments

Comments
 (0)