From a25271beb0fb5ff168280c35bf51240a53c1e2c8 Mon Sep 17 00:00:00 2001
From: Brian Smith <brian@briansmith.org>
Date: Thu, 17 Dec 2020 19:18:53 -0800
Subject: [PATCH] Ed25519 malleability test: Add control case.

---
 tests/ed25519_verify_tests.txt | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/tests/ed25519_verify_tests.txt b/tests/ed25519_verify_tests.txt
index ce893e42a1..6508fc6bf9 100644
--- a/tests/ed25519_verify_tests.txt
+++ b/tests/ed25519_verify_tests.txt
@@ -1,5 +1,12 @@
 # BoringSSL TEST(Ed25519Test Malleability) commit 472ba2c2dd52d06a657a63b7fbf02732a6649d21
 
+# Control; S is in range.
+MESSAGE = 54657374
+SIG = 7c38e026f29e14aabd059a0f2db8b0cd783040609a8be684db12f82a27774ab07a9155711ecfaf7f99f277bad0c6ae7e39d4eef676573336a5c51eb6f946b30d
+PUB = 7d4d0e7f6153a69b6242b522abbee685fda4420f8834b108c3bdae369ef549fa
+Result = P
+
+# Same as above, but with the order L added to S so it is out of range.
 MESSAGE = 54657374
 SIG = 7c38e026f29e14aabd059a0f2db8b0cd783040609a8be684db12f82a27774ab067654bce3832c2d76f8f6f5dafc08d9339d4eef676573336a5c51eb6f946b31d
 PUB = 7d4d0e7f6153a69b6242b522abbee685fda4420f8834b108c3bdae369ef549fa