Cofactor 8 & Point Validation

Ed25519 has cofactor 8, so points can carry a torsion component. Why key images must be checked for the prime-order subgroup, the hash-to-point map, and the bugs that ignoring this caused.

πŸŽ“ Graduate from Monero Academy

Create a free account, ace every quiz across all courses, and earn your place on the Graduates wall β€” with your own Monero address for donations. An account also tracks your progress through the courses, and graduating is the prize for finishing.