Fix canonical check.

diff --git a/src/assembly/ed25519/ge.ts b/src/assembly/ed25519/ge.ts
index 55a31e1680fa4e675d12124925fa1b4b16096bfa..e843f3d52aaa0382f5f9b99def57e8e9e33c421f 100644 (file)
--- a/src/assembly/ed25519/ge.ts
+++ b/src/assembly/ed25519/ge.ts
@@ -270,7 +270,7 @@ export function ge_has_small_order (p: ge_p3): i32 {
 export function ge_is_canonical (s: StaticArray<u8>): i32 {
        let c: i32 = (s[31] & 0x7f) ^ 0x7f
        for (let i = 30; i > 0; i--) {
-               c |= s[i]
+               c |= s[i] ^ 0xff
        }
        c = (c - 1) >> 8
        const d: i32 = (0xec - s[0]) >> 8