Reject small-order elements on signature verification

Author: twiss

index.html

@@ -1892,6 +1892,13 @@ <h4>Operations</h4>
                 and the value `false` otherwise.
               </p>
             </li>
+            <li>
+              <p>
+                If the point R, encoded in the first half of |signature|,
+                represents a small-order element on the Elliptic Curve of Ed25519,
+                [= exception/throw =] a {{DataError}}.
+              </p>
+            </li>
             <li>
               <p>
                 Return |result|.
@@ -2792,6 +2799,13 @@ <h4>Operations</h4>
                 and the value `false` otherwise.
               </p>
             </li>
+            <li>
+              <p>
+                If the point R, encoded in the first half of |signature|,
+                represents a small-order element on the Elliptic Curve of Ed448,
+                [= exception/throw =] a {{DataError}}.
+              </p>
+            </li>
             <li>
               <p>
                 Return |result|.