added explicit DSTs to all hash_to_curve calls

drand · Sep 21, 2023 · b6d496f · b6d496f
1 parent cda9820
commit b6d496f
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/src/crypto/ibe.ts b/src/crypto/ibe.ts
@@ -58,14 +58,15 @@ async function encrypt<T, U>(
 
 export async function encryptOnG1(master: PointG1, ID: Uint8Array, msg: Uint8Array): Promise<Ciphertext<PointG1>> {
     return encrypt(master, ID, msg, PointG1.BASE,
-        (id: Uint8Array) => bls.PointG2.hashToCurve(id),
+        (id: Uint8Array) => bls.PointG2.hashToCurve(id, { DST: "BLS_SIG_BLS12381G2_XMD:SHA-256_SSWU_RO_NUL_" }),
         (m, Qid) => bls.pairing(m, Qid)
     )
 }
 
+// uses the DST for G2 erroneously
 export async function encryptOnG2(master: PointG2, ID: Uint8Array, msg: Uint8Array): Promise<Ciphertext<PointG2>> {
     return encrypt(master, ID, msg, PointG2.BASE,
-        (id: Uint8Array) => bls.PointG1.hashToCurve(id),
+        (id: Uint8Array) => bls.PointG1.hashToCurve(id, { DST: "BLS_SIG_BLS12381G2_XMD:SHA-256_SSWU_RO_NUL_" }),
         (m, Qid) => bls.pairing(Qid, m)
     )
 }