EdDSA Verification Bug - Clarification on Format 2 Verification Failure

[Zachary Fogg]

i've never found a security bug before and am new to the field, just
tinkering with my own code only. i just happened to be coding on my project
and found the bug and thought i'd tell the developers. i didn't think to
check for a security policy, i just wanted to confirm it's a bug and get it
fixed so my project will work. i'll submit a bug through the security
policy, thanks.

On Wed, Jan 14, 2026 at 5:42 PM Sam James <sam at gentoo.org> wrote:

> Zachary Fogg via Gcrypt-devel <gcrypt-devel at gnupg.org> writes:
>
> > **In-Reply-To:** <response from NIIBE Yutaka on Oct 22, 2025>
> >
> > Hi NIIBE Yutaka,
> >
> > Thank you for your response on October 22! I apologize for the delay - I
> am new to the list and didn't receive your email
> > until I checked the web archives today.
>
> Out of interest..
>
> GnuPG's security policy is at
> https://gnupg.org/documentation/security.html. Is there a reason you
> don't seem to have followed that?
>
> > [...]
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gcrypt-devel/attachments/20260114/2abd4323/attachment.html>