From 034ea73ce3c3679f3ce91a5676b0e9da0744cedf Mon Sep 17 00:00:00 2001
From: dmiller <dmiller@e0a8ed71-7df4-0310-8962-fdc924857419>
Date: Mon, 29 Jan 2024 18:31:36 +0000
Subject: [PATCH] Fix EdDSA in default TLS 1.2 signature algorithms. Closes
 #2766

---
 CHANGELOG      | 2 ++
 nselib/tls.lua | 6 ++----
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/CHANGELOG b/CHANGELOG
index 1d1160dba..cab30166b 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -1,5 +1,7 @@
 #Nmap Changelog ($Id$); -*-text-*-
 
+o [NSE][GH#2766] Fix TLS 1.2 signature algorithms for EdDSA. [Daniel Roethlisberger]
+
 o [GH#2672] Fixed an issue where TCP Connect scan (-sT) on Windows would fail to open any
   sockets, leading to scans that never finish. [Daniel Miller]
 
diff --git a/nselib/tls.lua b/nselib/tls.lua
index b74306bf4..336445dc7 100644
--- a/nselib/tls.lua
+++ b/nselib/tls.lua
@@ -1691,13 +1691,11 @@ do
     {"sha256","rsa"},
     {"sha256","dsa"},
     {"sha256","ecdsa"},
-    {"sha256","ed25519"},
-    {"sha256","ed448"},
     {"sha512","rsa"},
     {"sha512","dsa"},
     {"sha512","ecdsa"},
-    {"sha512","ed25519"},
-    {"sha512","ed448"},
+    {"intrinsic","ed25519"},
+    {"intrinsic","ed448"},
   }
   DEFAULT_SIGALGS = EXTENSION_HELPERS["signature_algorithms"](sigalgs)
 end