dkim: Don't pass hash function to Sign for ed25519

emersion · Oct 28, 2019 · 100908a · 100908a
1 parent ca59a51
commit 100908a
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/dkim/sign.go b/dkim/sign.go
@@ -260,6 +260,12 @@ func NewSigner(options *SignOptions) (*Signer, error) {
 		}
 		hashed := hasher.Sum(nil)
 
+		// Don't pass Hash to Sign for ed25519 as it doesn't support it
+		// and will return an error ("ed25519: cannot sign hashed message").
+		if keyAlgo == "ed25519" {
+			hash = crypto.Hash(0)
+		}
+
 		sig, err := options.Signer.Sign(randReader, hashed, hash)
 		if err != nil {
 			closeReadWithError(err)